Mastering Microsoft Exchange Server 2003 phần 4 pptx

Figure 8.13: Microsoft Management Console with the Exchange System Manager snap−in installed The snap−in shows the Exchange organization created during Exchange 2003 installation. As you'll remember, during installation I named my organization Barry Gerber and Associates. The Exchange System snap−in is the same as the System Manager on the Start > All Programs > Microsoft Exchange menu (see Figure 8.12, shown earlier). That's why I call the snap−in Exchange System Manager. You've seen the Exchange System Manager in earlier chapters. Now you'll actually start using it. Just to get a feel for how it works, open the Exchange System Manager and then open the Servers container so that your MMC looks like the one in Figure 8.14. Exchange Server 5.5 users will be happy to see a somewhat familiar environment. Figure 8.14: The Exchange System Manager snap−in open to reveal some of its subcontainers Just for fun, right−click your Exchange server (EXCHANGE01, in my case), and select Properties to open the Exchange Server Properties dialog box shown in Figure 8.15. Again, Exchange 5.5 users should find at least some of what they see on this dialog box familiar. I'll talk a lot more about what you see here in later chapters. For now, I just want to familiarize you with the Exchange System Manager snap−in. Go ahead and muck about a bit in the snap−in. Just be careful not to add or delete anything at this point, and be sure to close the Properties dialog box. I'll be waiting right here when you're done. Setting Up Microsoft Management Console for Exchange Server 2003 203 Figure 8.15: Right−click on an Exchange server in Exchange System Manager and select Properties to open the server's Properties dialog box. Running Exchange System Manager Remotely As long as you have the right security permissions, you can run Exchange System Manager and other Exchange−specific applications from any networked Windows 2000 workstation or server. You can also run the System Manager on any Windows 2003 server or Windows XP workstation. This is convenient because you won't have to keep running to an Exchange server to administer it. Remember, you do have to be logged in to the appropriate domain and have the correct permissions to run the System Manager. You must install the Exchange System Management Tools on a computer in the Exchange server's domain or in a domain trusted by the server's domain. To install Exchange System Manager, run the Exchange Server 2003 Setup program on the computer from which you want to run Exchange System Manager. Select the Custom installation option, and select only the Microsoft Exchange System Management Tools for installation. When Exchange System Manager is installed, snap it into an MMC, and you're off and running. If you wanted to do the tasks in the next section on your domain controller, you would have to install the management tools on the domain controller. Granting Permission for the Exchange Administration Group to Manage Exchange Server Now you're ready to give members of your Exchange administration group, Exchange Admins, permissions to administer Exchange. You should be logged in to your domain on your Exchange server as Administrator. Assuming that you're still in Exchange System Manager in your MMC, right−click the Manager's root container and select Delegate Control. (My root container is called Barry Gerber and Associates [Exchange] in Figures 8.13 and 8.14, shown earlier.) This brings up the Exchange Administration Delegation Wizard. Click Next to see the Users or Groups page of the wizard, shown in Figure 8.16. Click Add on the Users or Groups page to open the Delegate Control dialog box (see right side of Figure 8.16). Click the Browse button Granting Permission for the Exchange Administration Group to Manage Exchange Server 204 to find and select your Exchange Admins group. The Role field's drop−down list gives you a choice of three roles: Exchange View Only Administrator• Exchange Administrator• Exchange Full Administrator Figure 8.16: Granting the Exchange Admins group permissions to administer an Exchange Server 2003 organization • As its name implies, View Only Administrator permits no editing of Exchange parameters. Exchange Administrator allows for viewing and editing of most Exchange parameters. Excluded are things such as the capability to change permissions. Exchange Full Administrator has complete control over the Exchange Server 2003 environment. Select Exchange Full Administrator from the drop−down list, and click OK. Then click Next and then Finish on the last page of the Exchange Administration Delegation Wizard. After the Wizard closes, you'll see a dialog box like the one in Figure 8.17, warning you that the users or groups to which you've delegated Exchange administrative privileges must also be members of the computer's local Administrators group. To do this, add the Local Users and Groups snap−in to your MMC and use it to add Exchange Admins to your Exchange server's local Administrators group (see Figure 8.18). If you've installed Exchange on a domain controller, there is no local administrators group. In this situation, Exchange Admins will still be able to do some Exchange management tasks. This alone is a good reason for not installing Exchange on a domain controller. Figure 8.17: A warning to place newly created Exchange administrative users or groups in the Exchange server's local Administrators group Granting Permission for the Exchange Administration Group to Manage Exchange Server 205 Figure 8.18: Adding the Exchange Admins group to the Exchange server's local Administrators group The permissions that you've delegated to Exchange Admins cascade down through all of the subcontainers under the Exchange System Manager root container for your Exchange Organization. This means that Exchange Admins have management rights in all the existing subcontainers and any new subcontainers you create. Now, and don't forget to do this step, you must delegate certain permissions to your Exchange Admins group in the User subcontainer of the Active Directory Users and Computers container. Right−click the Users container and select Delegate Control. A wizard pops up. Use the Users or Groups wizard page to add Exchange Admins. Then on the next wizard page, Tasks to Delegate, select Create, Delete, and Manage User Accounts and finish out the wizard. If you do not do this, you won't be able to add mailboxes for users when you complete certain tasks later in this chapter. You can go a step further and grant one or more other groups permissions in the certain subcontainers of the Exchange System Manager root container. In this way, you can assign rights to manage pieces of your Exchange Organization to different individuals or groups. This is especially useful when you begin creating Exchange administrative group subcontainers that contain pieces of your Exchange organizational hierarchy you want others to be able to manage. See Chapter 4 for more on administrative groups. Tip If you want to see the permissions that you've granted to the Exchange Admins group, right−click your Exchange server in the Exchange System Manager and select Properties. Tab over to the Security page and click the Exchange Admins group. The Permissions field shows the rights you've granted to Exchange Admins. Note Remember, we've gone through all of this delegation of control stuff to allow a group and its members to administer various Exchange server−related functions. The domain Administrator account with the rights it has out of the Windows 2003 box can do all this without you granting it anything special. We created this group for security reasons, so that an Exchange administrator doesn't need to have total control of a Windows 2003 domain or forest. Now for the moment of truth: Log out of your Exchange server, and log back in to your domain on your Exchange server as the special Exchange Administrator account you created. (My account was named ExAdBGerber.) When you're logged in, set up an MMC with the following snap−ins: Active Directory Users and Computers• Granting Permission for the Exchange Administration Group to Manage Exchange Server 206 Computer Management• Exchange System Manager• If you've set up everything as I advised, including adding your ExAd account to the Exchange Admins account, you should be able to open Exchange System Manager without any error messages. You should also be able to add and then delete a new storage group by right−clicking your Exchange server container in the Exchange System Manager's Servers container. In Figure 8.19, I'm adding the new storage group. To delete the new storage group, right−click it and select Delete from the pop−up menu. Figure 8.19: Adding a new storage group to an Exchange server using a Windows Server 2003 account that was added to a Windows Server 2003 security group and delegated authority to manage an Exchange Server 2003 organization Mailbox−Enabling a Windows 2003 User The next two chapters of this book deal with the Microsoft Outlook e−mail client. To use the client, you need an Exchange 2003 mailbox−or more correctly, you need to mailbox−enable your Windows 2003 user account. This is the account that you created back in Chapter 7. Mine is called bgerber. To start, log in to your domain on your domain controller using your ExAd account. You can also use the domain Administrator account if you wish. Open your MMC, find your account in the \Active Directory Users and Computers\Users container, and right−click it. Then select Exchange Tasks from the pop−up menu. This brings up the Exchange Task Wizard. Click Next to move to the Available Tasks page, shown in Figure 8.20. Be sure that Create Mailbox is selected, and click Next. The Create Mailbox page offers default options for the mailbox's alias and the Exchange server and mailbox store on the server where the mailbox will be created (see Figure 8.21). Accept the defaults. In later chapters, we'll play with other available options. Mailbox−Enabling a Windows 2003 User 207 Figure 8.20: Choosing to create a new mailbox using the Exchange Task Wizard Figure 8.21: Accepting default options for a mailbox using the Exchange Task Wizard Click Next, and the Task in Progress page shows Exchange Server 2003's progress in creating the new mailbox. When the task has completed (see Figure 8.22), click Finish. Figure 8.22: The Exchange Task Wizard has completed creation of a new mailbox. Next, right−click your account in \Active Directory Users and Computer\Users and select Properties from the pop−up menu. As Figure 8.23 shows, during creation of the new mailbox, several new Exchange−based pages were added to the Properties dialog box for the account. We'll delve into these new pages in great detail in later chapters. Mailbox−Enabling a Windows 2003 User 208 Figure 8.23: Several new Exchange−based property pages were added to the User Properties dialog box during mailbox creation. By the way, notice the e−mail address I've been assigned, bgerber@bgerber.local. My real e−mail address will be bgerber@bgerber.com. Right now, Exchange doesn't know anything about that address. I'll show you how to change that in Chapter 13. That's it. Your Exchange server is installed and ready to use. Now you need to set up a backup regimen for the server. Backing Up Exchange Server 2003 Now, let's set up a backup for our Exchange Server 2003. We're going to use the Windows Server 2003 Backup application. When you install Exchange Server 2003, Exchange−based application program interfaces (APIs) are installed for backup. Windows Server 2003 Backup takes advantage of these APIs to let you access and properly back up your Exchange 2003 server. I'm going to move through this pretty fast because I already discussed the Backup application in Chapter 7. To perform the backup: Log in to your domain on your Exchange server as Administrator or to the server itself as Administrator. 1. Select Start > All Programs > Accessories > System Tools > Backup to run the Backup application. This brings up the Backup or Restore Wizard. 2. Click to the next wizard page called What to Back Up (see Figure 8.24).3. Backing Up Exchange Server 2003 209 Figure 8.24: Telling the Windows Server 2003 Backup program to back up selected items using the Backup or Restore Wizard Select Let Me Choose What to Back Up, and click Next.4. On the Items to Back Up wizard page, select the Microsoft Information Store, as I have in Figure 8.25. You should also select the C: drive and System State under My Computer. Figure 8.25: Selecting Exchange components to be backed up by the Windows Server 2003 Backup program using the Backup or Restore Wizard 5. Click Next, and use the Backup Type, Destination, and Name page to set the correct parameters (see Figure 8.26). I'm backing up to disk. If you're backing up to tape, you'll see a page appropriate for tape backup. 6. Backing Up Exchange Server 2003 210 Figure 8.26: Confirming backup type, location, and name to be used by the Windows Server 2003 Backup program using the Backup or Restore Wizard To back up immediately, click Next on the Completing the Backup or Restore Wizard page (see Figure 8.27). You can also click Advanced to, among other things, schedule your backup. (Check out Chapter 7 for details on scheduling a backup and other advanced options.) I suggest you do a normal (full) backup of your Exchange server every time you back it up. It's much easier to restore a normal Exchange backup than an incremental or differential one. Figure 8.27: Using the Backup or Restore Wizard's Completing the Backup or Restore page to finish and start a backup, or to select advanced options, including backup job scheduling 7. To see the logs for your backups, select Reports from the Backup program's Tools menu. Be sure to test your backups regularly to ensure that you can restore from them. Any vendor can splice into the application−programming interface that Windows Server 2003 Backup uses when it does an online backup of the Exchange information store. A number of vendors have done just that, including Computer Associates (ARCserveIT; www.cai.com), LEGATO Systems (Legato NetWorker for Windows NT; www.legato.com), and Veritas Software (Backup Exec; www.veritas.com). Third−party backup solutions add value beyond Windows Server 2003's own built−in backup program. For example, they can do the following: Let you easily and efficiently back up multiple servers and even other workstations on the network, including registry and system state information • Backing Up Exchange Server 2003 211 Support online Exchange Server backup as well as online backup of other application services such as Oracle or Microsoft SQL Server • Make scheduling and monitoring the whole backup process very easy• Send you e−mail containing information about the most recent backup• Summary You must take care of a number of preliminaries before actually installing Exchange Server 2003. You need to set up and test your server hardware, including disk drives and tape backup system. Then you must install the correct version of Windows Server 2003 on a stand−alone server and ensure that it is capable of joining its domain. After you have installed Windows 2003, you need to do some tasks before installing Exchange 2003: Ensure that security matters have been taken into account, including setting up any cross− domain trusts and establishing a security group to manage your soon−to−be Exchange server. • Gather information that you will need when installing your Exchange server, including where on your servers disk drives you want to install Exchange, the Exchange components that you want to install, and the name that you want to use for your Exchange organization. • After all the preparation, Exchange server installation is a piece of cake. An installation wizard guides you through the process. The only thing that you might find a bit daunting is the long waits while certain steps in the process take place, such as Active Directory schema updating. After Exchange Server 2003 is installed, you must check to ensure that Exchange services are running and that you can communicate with your server. To do this, you need to create a MMC and add basic plug−ins as well as the Exchange System Manager. With the System Manager installed, you can grant your Exchange security group permissions to manage your Exchange server and begin managing the server. One of your first Exchange management steps should be to add a new mailbox. Finally, you should be sure to set up backup for your Exchange server. Now that you have a mailbox, its time to use it. In the next couple of chapters, Ill introduce you to Microsofts Outlook e−mail client. First Ill show you how to set up Outlook so that users can install it preconfigured from a centralized server. Then Ill spend some time helping you get familiar with Outlook from an end users perspective. Summary 212 [...]... and 2003 clients • Outlook Web Access (web browserbased client) In addition to these Exchange clients, which provide access to the full range of Exchange Server capabilities, Exchange Server also supports POP3 and IMAP4 clients from Microsoft and other vendors Ill focus here on the current native Exchange Server client, Outlook 2003, and reserve discussion of the Outlook Web Access, POP3, and IMAP4 clients... of my Exchange server, exchange0 1, in the Exchange Server field on the eighteenth wizard page Wait! I can hear you saying, Does that mean I have to create a whole Office 2003 installation for every Exchange server I set up in an Exchange organization? The good news is that the answer is no The even better news is that any Exchange server in an organization can redirect Outlook to the correct server. .. the addition of IMAP to Outlook 2003 Ill talk much more about POP3 and IMAP in Chapter 14 HTTP supports the connection of Outlook 2003 clients to an Exchange 2003 server over the Internet using the HTTP protocol This feature is new to Exchange 2003 and is discussed in Chapter 16, Advanced Exchange Server Administration and Management Personal folders live outside of Exchange mailboxes on local or networked... discussion Exchange Server has been around for more than eight years In that time, Microsoft has generated a slew of new and increasingly improved Exchange clients: • Original DOS and Windows 3.x, 95, and NT clients that came with Exchange Server 4 and 5 • Exchange client for Macintosh • Windows 95 and NT Outlook clients that came with Office 97 • Windows 95 and NT Outlook clients that came with Exchange Server. .. Client Chapter List Chapter 9: Installing Outlook 2003 from a Customized Server Image Chapter 10: A Quick Overview of Outlook 2003 213 Chapter 9: Installing Outlook 2003 from a Customized Server Image Overview Exchange Server is a pretty nifty little gadget But without clients, its nothing more than fancy technology Although this is a book on Exchange Server, we need to spend a little time talking about... a shared folder on a Windows NT, 2000, or 2003 server or a Windows 2000 Professional or XP workstation You can put an administrative installation point on your Exchange server for testing, but I suggest that you use another server in production mode Office 2003 installations can eat up a lot of server resources, resources better dedicated to running Exchange Server In spite of my warnings to the contrary,... the Outlook Web Access, POP3, and IMAP4 clients for Chapter 14, Managing Exchange 2003 Services for Internet Clients Tip Most of what I say about Outlook 2003 applies to Outlook 2000 and 2002 Both of these clients, as well as most of the older ones, can access an Exchange 2003 server However, the methods for distributing Outlook from a central server that we look at in this chapter apply only to the Outlook... administrative installation point on the Exchange server we set up in Chapter 8, Installing Exchange Server 2003 So, Ill refer to the Windows 2003 operating system and its tools here You need about 500MB of free disk space to install Office 2003 on an installation point So, dont move on to the next paragraph until youve located a disk drive with sufficient space Well use Windows 2003s Windows Explorer (Start... Start > All Programs > Microsoft Office > Microsoft Office Tools > Microsoft Office 2003 Resource Kit Tools > Custom Installation Wizard Whew! The wizard opens to the panel shown in Figure 9.3 Figure 9.3: The first panel of the Microsoft Office 2003 Custom Installation Wizard 218 Customizing Outlook 2003 The wizard has lots of panels to guide you through customization of Office 2003 Lets take a look... administrative perspective as we focus on the Outlook 2003 client for Windows that is part of the Office 2003 suite First well tackle customizing Outlook 2003 for installation from a network server to user workstations Then well install Outlook 2003 on an individual workstation using our custom server based setup If you need to install any of the older Exchange Server clients, check out the docs that come with . the server. Backing Up Exchange Server 2003 Now, let's set up a backup for our Exchange Server 2003. We're going to use the Windows Server 2003 Backup application. When you install Exchange. storage group to an Exchange server using a Windows Server 2003 account that was added to a Windows Server 2003 security group and delegated authority to manage an Exchange Server 2003 organization Mailbox−Enabling. of Exchange Server capabilities, Exchange Server also supports POP3 and IMAP4 clients from Microsoft and other vendors. Ill focus here on the current native Exchange Server client, Outlook 2003,