Module 2: Analyzing Active Directory for Exchange 2000

Module 2: Analyzing Active Directory for Exchange 2000 Contents Overview Reviewing Active Directory Basics Examining How Exchange 2000 Uses Active Directory Examining How Exchange 2000 Works with DSAccess 20 Designing Active Directory Groups for an Exchange 2000 Organization 28 Discussion: Planning Group Types and Scopes 40 Lab A: Active Directory Design Considerations 43 Lab B: Creating a UPN Suffix 50 Lab C: Modifying the Default Recipient Policy 55 Lab D: Creating Groups for Northwind Traders 58 Lab Discussion 62 Information in this document is subject to change without notice The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted Complying with all applicable copyright laws is the responsibility of the user No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Microsoft Corporation If, however, your only means of access is electronic, permission to print one copy is hereby granted Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property  2001 Microsoft Corporation All rights reserved Microsoft, Active Directory, BackOffice, FrontPage, NetMeeting, Outlook, PowerPoint, SQL Server, Visio, Visual Studio, Win32, Windows, Windows Media, and Windows NT are either registered trademarks or trademarks of Microsoft Corporation in the U.S.A and/or other countries Other product and company names mentioned herein may be the trademarks of their respective owners Module 2: Analyzing Active Directory for Exchange 2000 Instructor Notes Presentation: 90 Minutes Lab: 75 Minutes This module provides students with the knowledge required to analyze the Microsoft® Windows® 2000 Active Directory™ directory service environment for factors that influence the Microsoft Exchange 2000 organization After completing this module, students will be able to: !" Explain how Active Directory works !" Evaluate how Exchange 2000 uses Active Directory !" Explain how Exchange 2000 works with DSAccess !" Design Active Directory groups for an Exchange 2000 organization Materials and Preparation This section provides the materials and preparation tasks that you need to teach this module Required Materials To teach this module, you need: !" The Microsoft PowerPoint® file 1573A_02.ppt !" The Active Directory Groups job aid !" The Northwind Traders Case Study !" The Fourth Coffee Case Study Preparation Tasks To prepare for this module, you should: !" Read all of the materials for this module !" Complete the labs !" Review the Northwind Traders Case Study !" Read the Fourth Coffee Case Study !" Review the Active Directory Groups job aid !" Review the scenarios associated with the class discussions and prepare questions to supplement the questions provided Note The job aids are in the Exchange 2000 Design Tool located at C:\MOC\1573A\LabFiles\Exchange_2000_Design_Tool, and on the student compact disc The case studies are in the Appendices and on the student compact disc iii iv Module 2: Analyzing Active Directory for Exchange 2000 Module Strategy Use the following strategy to present this module: !" Reviewing Active Directory Basics This topic provides a review of fundamental concepts in Active Directory Begin by discussing the role of Active Directory in an enterprise environment Continue by discussing the Active Directory schema, domains, the global catalog, and the site topology of Active Directory !" Examining How Exchange 2000 Uses Active Directory This topic outlines the components in Active Directory that affect Exchange 2000 Begin by discussing the Active Directory forest environment; explain the design issues associated with a multiple forest structure Emphasize the importance of preparing the forest by using the /forestprep switch Next, explain how domain controllers affect Exchange 2000 Emphasize the importance of preparing the domain by using the /domainprep switch Next, describe each type of partition in which Active Directory stores Exchange 2000 data, explain how Exchange 2000 data affects the Active Directory database, and then complete this topic by explaining user principle names !" Examining How Exchange 2000 Works with DSAccess This topic outlines how Exchange 2000 works with DSAccess Begin by defining DSAccess, and then explain how Exchange 2000 uses DSAccess to gain access to Active Directory domain controllers and global catalogs Continue by discussing how Exchange 2000 detects and defines domain controllers and global catalogs Finally, explain the DSProxy process and the client referral process !" Designing Active Directory Groups for an Exchange 2000 Organization This topic outlines the design considerations associated with each type of Active Directory group Begin by reviewing the three scopes of groups available, as well as the two types Make sure students understand the differences between universal groups, global groups, and domain local groups Discuss universal groups, including when to use them and the design implications associated with using them Emphasize that universal groups are the preferred group type for an Exchange 2000 organization Continue by discussing domain local groups and global groups, including when to use them, and the associated design issues Next, discuss how to use Active Directory groups with Exchange 2000 Finally, facilitate a classroom discussion focusing on the three scenarios provided at the end of the module Module 2: Analyzing Active Directory for Exchange 2000 v Customization Information This section identifies the lab setup requirements for a module and the configuration changes that occur on the student computers during the labs This information is provided to assist you in replicating or customizing Microsoft Official Curriculum (MOC) courseware Lab Setup The following list describes the setup requirements for the labs in this module !" For each student, a Microsoft Management Console (MMC) custom console must be created This custom console must include both the Active Directory Users and Computers snap-in and the Exchange System snap-in, and must be named your_firstname Console !" For each student, a personalized user account must be created in the appropriate domain This user account must be added to the Domain Admins group, and assigned a mailbox on the server running Exchange 2000 that the student is using !" For each student, a user profile must be created on the student’s computer that enables the student to access their mailbox by using Microsoft Outlook® 2000 Lab Results Performing the labs in this module introduces the following configuration changes: !" One additional user principal name (UPN) suffix is created for the entire Windows 2000 forest The UPN suffix that is used will vary as the students determine the suffix they want to use !" The personalized user account for each student is modified so that their UPN suffix matches the suffix that was created during this lab !" For each student, a new account is created to verify that the new UPN suffix appears !" The default recipient policy for the Exchange 2000 organization is modified by the creation of an additional Simple Mail Transfer Protocol (SMTP) address The new SMTP address is given the format of %g.%i.%s@nwtraders.msft The new SMTP address is set as the primary address !" A universal security group called Helpdesk is created for each domain This group is named your_domain Helpdesk This group is mail-enabled !" A universal security group called IT Group is created for each domain This group is named your_domain IT Group This group is mail-enabled !" A universal security group called HR is created for each domain This group is named your_domain HR Personnel This group is mail-enabled !" For each student, a universal security group is created for the executive mailboxes located on each server This group is named your_servername Executives Each student adds their personal account to their local executives group This group is mail-enabled !" For each student, the your_servername Executives group is added to the All Executives group Module 2: Analyzing Active Directory for Exchange 2000 Overview Topic Objective To provide an overview of the module topics and objectives ! ! Examining How Exchange 2000 Works with DSAccess ! In this module, you will learn about the Active Directory components that Exchange 2000 depends on for directory services, and how these components can affect the design plan for an Exchange 2000 organization Examining How Exchange 2000 Uses Active Directory ! Lead-in Reviewing Active Directory Basics Designing Active Directory Groups for an Exchange 2000 Organization Microsoft® Exchange 2000 depends on the Microsoft Active Directory™ directory service Directory services provide three functions: they store information about network resources; they make these resources available to users and applications; and they provide a consistent way to name, describe, locate, access, manage, and secure resources Evaluating how Exchange 2000 uses Active Directory enables you to design your Exchange 2000 organization more effectively Exchange 2000 uses Active Directory forests and domains to store and replicate data throughout the Exchange 2000 organization In addition, portions of Exchange data reside on various Active Directory partitions Architects who are designing an Exchange 2000 organization for the enterprise must understand both how Exchange 2000 uses Active Directory and the effects of the Active Directory design on the Exchange 2000 environment Architects also need to understand how Exchange 2000 uses DSAccess and how to use Active Directory groups most effectively in an Exchange 2000 organization After completing this module, you will be able to: !" Explain how Active Directory works !" Explain how Exchange 2000 uses Active Directory !" Explain how Exchange 2000 works with DSAccess !" Design Active Directory Groups for an Exchange 2000 organization Module 2: Analyzing Active Directory for Exchange 2000 # Reviewing Active Directory Basics Topic Objective To outline the topics covered in this review of Active Directory Understanding how Active Directory works requires understanding both its architectural elements and its role in an enterprise Role of Active Directory in an Enterprise ! Active Directory Schema ! Domains ! Global Catalog ! Lead-in ! Site Topology Understanding how Active Directory works requires understanding both its architectural elements and its role in an enterprise Key architectural elements include the schema, domains, the global catalog, and Active Directory sites For Your Information This section provides a review of Active Directory fundamentals If your student group has met the prerequisites for this course, it may not be necessary to cover this section Module 2: Analyzing Active Directory for Exchange 2000 Role of Active Directory in an Enterprise Topic Objective ! Lead-in Domains and OUs Form Hierarchical Structures ! To explain the role of Active Directory in an enterprise environment Multiple Domains Can Form Domain Domain $ Trees $ Administrators use Active Directory to define, arrange, and manage objects so that those objects are available to users and applications throughout the company Forests Tree OU OU Domain Domain OU OU Forest Domain Domain Objects Tree Domain Domain OU Domain OU Domain Domain Domain In Windows 2000, Active Directory is a network directory service Administrators use Active Directory to define, arrange, and manage objects so that those objects are available to users and applications throughout the company In Active Directory, objects are logically organized into a hierarchical structure The objects that create the overall structural hierarchy in Active Directory are: !" Domains This is the core unit of Active Directory A domain is a container of objects that share security requirements, replication processes, and administration Active Directory uses a multi-master replication model in which all domain controllers are equal !" Organizational units (OUs) An OU is a container object that is used to organize the objects within a domain into groups for administrative purposes Within a domain, OUs form a hierarchical structure based on the organization's administrative model Multiple domains within a single Active Directory can create additional structures in the form of: !" Trees A tree is a hierarchical arrangement of one or more domains that share a common root domain name Domains within a tree share information through automatic trust relationships !" Forests A forest is a collection of one or more trees Multiple trees within a forest not share a common root domain name, but they share information through automatic trust relationships Multiple forests can share information only through explicit trust relationships Module 2: Analyzing Active Directory for Exchange 2000 Active Directory Schema Topic Objective Active Directory Schema Is: ! Dynamically Available ! Dynamically Updateable ! Protected by DACLs Object Object Class Examples Class Examples To describe the Active Directory schema Lead-in The Active Directory schema contains the definitions of all objects that are stored in Active Directory Computers Computers Users Users Attribute Attribute Examples Examples Attributes of Users Attributes of Users Might Contain: Might Contain: accountExpires accountExpires department department distinguishedName distinguishedName middleName middleName Printers Printers List of Attributes List of Attributes accountExpires accountExpires department department distinguishedName distinguishedName directReports directReports dNSHostName dNSHostName operatingSystem operatingSystem repsFrom repsFrom repsTo repsTo middleName middleName … … The Active Directory schema contains the definitions of all objects—such as computers, users, and printers—that are stored in Active Directory In Windows 2000, there is only one schema for an entire forest, which means that all objects created in Active Directory must conform to the same set of rules Object Classes and Attributes The two types of definitions in the schema are object classes and attributes Object classes describe the possible directory objects that can be created Each object class is a collection of attributes Attributes are defined separately from object classes Each attribute is defined only once and can be used in multiple object classes For example, the Description attribute is used in many object classes, but to ensure consistency, it is defined only once in the schema Storing the Schema The Active Directory database stores the schema This means that the schema: !" Is dynamically available to user applications User applications can read the schema to discover which objects and properties are available for use !" Is dynamically updateable, which enables an application to extend the schema with new attributes and object classes, and then to use these schema extensions immediately !" Can use discretionary access control lists (DACLs) to protect all object classes and attributes The use of DACLs prevents unauthorized users from making schema changes 50 Module 2: Analyzing Active Directory for Exchange 2000 Lab B: Creating a UPN Suffix Topic Objective To introduce the lab Lead-in In this lab, you will create a UPN suffix Explain the lab objectives Objectives After completing this lab, you will be able to: !" Create an additional UPN suffix for Northwind Traders !" Log on to Windows by using your new UPN Prerequisites Before working on this lab, you must have: !" Knowledge of Microsoft Windows 2000 !" Knowledge of the Active Directory Users and Computers MMC snap-in Module 2: Analyzing Active Directory for Exchange 2000 51 Lab Setup To complete this lab, you need the following: !" For each student, a Microsoft Management Console (MMC) custom console must be created This custom console must include both the Active Directory Users and Computers snap-in and the Exchange System snap-in, and must be named your_firstname Console !" For each student, a personalized user account must be created in the appropriate domain This user account must be added to the Domain Admins group, and assigned a mailbox on the server running Exchange 2000 that the student is using !" To identify the appropriate values for the variables that are listed in the following table These values should be the same as the values that were defined for the account created in Lab A for Module Variable Value your_firstname your_username your_lastname your_displayname Estimated time to complete this lab: 20 minutes 52 Module 2: Analyzing Active Directory for Exchange 2000 Exercise Creating an Additional UPN Suffix In this exercise, you will implement the decision reached during the previous lab to create a UPN suffix to provide a universal logon scheme !" determine the UPN suffix for the class To • The class will discuss and decide on a functional UPN suffix for Northwind Traders In the following space, record the suffix name (Use this naming convention: custom_UPN_suffix) !" Instructor only: To create an additional UPN suffix Log on to the NWTraders domain as Administrator From your desktop, click Start, point to Programs, point to Administrative Tools, and then click Active Directory Domains and Trusts In the left pane, right-click Active Directory Domains and Trusts, and then click Properties Important Do not right-click your domain In the Alternate UPN suffixes box, type the custom_UPN_suffix Click Add Verify that the custom_UPN_suffix has been added The custom_UPN_suffix box appears below the Alternate UPN suffixes box Click OK to close the Active Directory Domains and Trusts Properties page Log off as Administrator Module 2: Analyzing Active Directory for Exchange 2000 53 Exercise Creating a New User Account and Verifying that the New UPN Suffix Is Functioning Properly In this exercise, you will verify that the additional UPN suffix that was created in the previous exercise is functioning properly by creating a new user account You will also modify the user account that you created in Lab A in Module to reflect the new UPN strategy !" modify the your_username account to reflect the new UPN strategy To Log on to your_domain as your_username Open your_firstname Console Expand your_domain (if it has not already been expanded), and then click the Users Organizational Unit Right-click your_username, and then click Properties Click the Account tab In the second half of the User logon name box, click the drop-down menu, and click @custom_UPN_suffix Click OK to apply the changes !" verify that the UPN is functioning properly To Log off from Windows If prompted to save your console settings, click Yes After you have logged off from Windows, press CTRL+ALT+DEL to display the Log On to Windows dialog box In the User name box, type your_username@custom_UPN_suffix In the Password box, type your_password Click OK to log on You should have successfully logged on Note When you began entering the @ custom_UPN_suffix portion of your logon name, the Log on to box became unavailable Because a UPN is being used to log on to Windows, the user does not need to know to which domain they belong 54 Module 2: Analyzing Active Directory for Exchange 2000 !" create a new user account, and to verify that the new UPN appears To Right-click the Users Organizational Unit, point to New, and click User The New Object–User dialog box appears In the First name box, type any first name that you would like to use In the Last name box, type any last name that you would like to use In the User logon name box, type the first letter of the first name and then type the entire last name (For example, Joe Smith’s user logon name would be jsmith.) In the drop-down menu to the right of the box where you entered the user logon name, verify that the UPN suffix reads @custom_UPN_suffix, and then click Next Type password for the user’s password, retype the password to confirm it, and then click Next Clear the Create an Exchange mailbox check box, and then click Next Click Finish to create the new user account Module 2: Analyzing Active Directory for Exchange 2000 55 Lab C: Modifying the Default Recipient Policy Topic Objective To introduce the lab Lead-in In this lab, you will modify the default recipient policy Explain the lab objectives Objectives After completing this lab, you will be able to: !" Modify a recipient policy within Exchange 2000 !" Verify that the proper SMTP address has been applied to user accounts Prerequisites Before working on this lab, you must have: !" Knowledge of Windows 2000 !" Knowledge of the Active Directory Users and Computers MMC !" Knowledge of the Exchange System MMC Lab Setup To complete this lab, you need the following: !" For each student, a Microsoft Management Console (MMC) custom console must be created This custom console must include both the Active Directory Users and Computers snap-in and the Exchange System snap-in, and must be named your_firstname Console !" For each student, a personalized user account must be created in the appropriate domain This user account must be added to the Domain Admins group, and assigned a mailbox on the server running Exchange 2000 that the student is using Estimated time to complete this lab: 20 minutes 56 Module 2: Analyzing Active Directory for Exchange 2000 Exercise Modifying the Default Recipient Policy In this exercise, you will modify the default recipient policy on your server running Exchange 2000 so that it reflects the SMTP policy that was created in Lab A of Module For Your Information Some of the exercises in this lab are only performed by the instructor or by specific students within each domain Be sure to note this to your students !" Instructor only: To modify the default recipient policy in Exchange 2000 and apply it Log on to the NWTraders domain as Administrator Open your_firstname Console Expand Northwind Traders, expand Recipients, and then click Recipient Policies Right-click Default Policy, and then select Properties In the Default Policy Properties dialog box, click the E-Mail Addresses tab, and then click New In the New E-mail Address dialog box, click SMTP Address and click OK In the SMTP Address Properties dialog box, in the Address box, type %g.%i.%s@nwtraders.msft and then click OK to apply the new settings In the Generation rules box, select the new SMTP address that you created, and then click Set as Primary Next to the new SMTP address that you created, select the check box to enable the new address 10 Click OK again to save the changes and to close the dialog box 11 When prompted by the Exchange System Manager to update all corresponding recipient e-mail addresses to match this new address, click Yes 12 Log off the Administrator account Important Verify that the changes to the Default Recipient Policy have been replicated throughout the entire classroom before proceeding with the next exercise Module 2: Analyzing Active Directory for Exchange 2000 57 !" students: To verify that the policy change has been implemented All Log on to your_domain as Administrator Open your_firstname Console Expand Active Directory Users and Computers, and then click Users Right-click your_username, and then click Properties Click the E-mail Addresses tab An SMTP entry for your_firstname.your_lastname@nwtraders.msft appears Note If you not see the correct SMTP address, you may need to force your Recipient Update Service to run In your_firstname console, expand Northwind Traders (Exchange), expand the Recipients container, and click Recipient Update Services In the right-hand pane, right-click each of the Recipient Update Services for your_domain, and Enterprise Configuration, and then click Update Now Repeat steps and to verify that the proper SMTP address has been added for your_username Click Remove to delete the old SMTP address, and when prompted to verify that you want to remove this e-mail address, click Yes Click OK to apply the changes and to close the your_username Properties page Log off from Windows 58 Module 2: Analyzing Active Directory for Exchange 2000 Lab D: Creating Groups for Northwind Traders Topic Objective To introduce the lab Lead-in In this lab, you will create groups for Northwind Traders Explain the lab objectives Objectives After completing this lab, you will be able to: !" Create Windows 2000 distribution and security groups !" Populate Windows 2000 groups Prerequisites Before working on this lab, you must have: !" Knowledge of Windows 2000 groups !" Knowledge of Active Directory administration Lab Setup To complete this lab, you need the following: !" For each student, a Microsoft Management Console (MMC) custom console must be created This custom console must include both the Active Directory Users and Computers snap-in and the Exchange System snap-in, and must be named your_firstname Console !" For each student, a personalized user account must be created in the appropriate domain This user account must be added to the Domain Admins group, and assigned a mailbox on the server running Exchange 2000 that the student is using Estimated time to complete this lab: 15 minutes Module 2: Analyzing Active Directory for Exchange 2000 59 Exercise Creating Groups for Northwind Traders Only one person in each domain will perform portions of this exercise Identify the student in your domain that will perform these procedures This student is referred to as Student A in this exercise In this exercise, you will create several Windows 2000 groups for the purposes of security and e-mail distribution The following table lists administrators and the group to which each administrator must belong User name (alias) Group membership Paul West (paulwe) NAmerica Helpdesk Anne L Paper (annepa) NAmerica IT Group Jon Morris (jonm) NAmerica HR Personnel Luis Bonifaz (luisbo) SAmerica Helpdesk Don Hall (donha) SAmerica IT Group Sandra I Martinez (smartinez) SAmerica HR Personnel Jae B Pak (jaepa) Europe Helpdesk Jan Miksovsky (janmi) Europe IT Group Judy Lew (judyl) Europe HR Personnel Sunil Koduri (sunilko) Africa Helpdesk Kim Yoshida (kimyo) Africa IT Group Stefan Knorr (stephank) Africa HR Personnel Meng Phua (mengph) Asia Helpdesk Fukiko Ogisu (fukikoog) Asia IT Group Suzan Fine (suzanf) Asia HR Personnel James Smith (jamessmith) SPacific Helpdesk Laurent Vernhes (laurentve) SPacific IT Group Greg Bott (gbott) SPacific HR Personnel !" Student A: To create the regional Helpdesk group On the desktop, open your_firstname Console Expand Active Directory Users and Computers, and then expand your_domain.nwtraders.msft Right-click Users, point to New, and then click Group In the Group name box, type your_domain Helpdesk and verify that the Group scope is Universal and that the Group type is Security, and then click Next Select the Create an Exchange e-mail address check box, verify that the Alias is set to your_domain Helpdesk, and then click Next Click Finish to close the New Object–Group dialog box 60 Module 2: Analyzing Active Directory for Exchange 2000 In the console tree, click Users In the details pane, double-click your_domain Helpdesk Click the Members tab, and then click Add 10 Add the appropriate user to your_domain Helpdesk as defined in the preceding table 11 Click OK to close the your_domain Helpdesk Properties dialog box !" Student A: To create your regional IT group Expand Active Directory Users and Computers, and then expand your_domain.nwtraders.msft Right-click Users, point to New, and then click Group In the Group name box, type your_domain IT Group and verify that the Group scope is Universal and the Group type is Security, and then click Next Select the Create an Exchange e-mail address check box, verify that the Alias is set to your_domain ITGroup, and then click Next Click Finish to close the New Object–Group dialog box In the console tree, click Users In the details pane, double-click your_domain IT Group Click the Members tab, and then click Add Add the appropriate user to your_domain IT Group as defined in the preceding table 10 Click OK to close the your_domain IT Group Properties dialog box !" Student A: To create your regional HR Personnel group Expand Active Directory Users and Computers, and then expand your_domain.nwtraders.msft Right-click Users, point to New, and then click Group In the Group name box, type your_domain HR Personnel and verify that the Group scope is Universal and the Group type is Security, and then click Next Select the Create an Exchange e-mail address checkbox, verify that the Alias is set to your_domain HR Personnel, and then click Next Click Finish to close the New Object–Group dialog box In the console tree, click Users In the details pane, double-click your_domain HR Personnel Click the Members tab, and then click Add Add the appropriate user to your_domain HR Personnel as defined in the table at the beginning of this exercise 10 Click OK to close the your_domain HR Personnel Properties dialog box Module 2: Analyzing Active Directory for Exchange 2000 61 !" students: To create a distribution list for Executives on your server All On the desktop, open your_firstname Console Expand Active Directory Users and Computers, and then expand your_domain.nwtraders.msft Right-click Users, point to New, and then click Group In the Group name box, type your_servername Executives and verify that the Group scope is Universal and the Group type is Security, and then click Next Select the Create an Exchange e-mail address check box, verify that the Alias is set to your_servername Executives, and then click Next Click Finish to close the New Object–Group dialog box !" students: To configure membership for your_servername Executives All In the console tree of your_firstname Console, expand Active Directory Users and Computers, expand your_domain, and then click Users Right-click your_servername Executives and then click Properties Click Members, and then click Add Click your_username and then click Add Click OK to close the Select Users, Contacts, Computers, or Groups dialog box Click Member Of and then click Add In the Look in box, click nwtraders.msft In the Name column, click All Executives, click Add, and then click OK Click OK to close the your_servername Executive Properties dialog box 10 Close your_firstname Console, and then log off from Windows 62 Module 2: Analyzing Active Directory for Exchange 2000 Lab Discussion Topic Objective To discuss the labs associated with this module Lead-in Let’s discuss the labs The questions and answers on this discussion page are not printed in the student workbooks They are intended to help you facilitate classroom discussion, but you should also feel free to ask your own questions QUESTION: Do you agree with the group strategy that was designed for Northwind Traders? ANSWER: Answers will vary Keep in mind that universal groups are always recommended for distribution lists that will be used across multiple domains QUESTION: How might you have designed Northwind Traders’ group strategy differently? ANSWER: Answers will vary QUESTION: How might you have designed your UPN and SMTP address strategies differently? ANSWER: Answers will vary Module 2: Analyzing Active Directory for Exchange 2000 63 QUESTION: What other Active Directory design considerations you need to discuss with the Active Directory team for Northwind Traders? ANSWER: The Exchange 2000 architects should point out to the Active Directory team that it is important to run /forestprep as soon as possible, so that the schema extensions can be replicated throughout the forest, and so that the initial delegation of Exchange 2000 organization rights can be performed In addition, it is important to remind the Active Directory team that /domainprep must be run in each domain where a server running Exchange 2000 will be placed, and also in any domains that will host Windows 2000 accounts that have Exchange 2000 mailboxes Also, the Exchange 2000 architects should note the increase in the size of the Active Directory database when Exchange 2000 is installed, and when mailboxes are created This will incur some replication traffic on the network as any changes made to the Active Directory database will be replicated to all Domain Controllers within the local domain QUESTION: Did we meet the requirements of Northwind Traders during the handson lab exercises? ANSWERS: Not 100 percent We created universal groups for the purposes of mail distribution across multiple domains What we did not in this lab was create global groups within each domain and then nest them into a universal group in order to reduce replication We did configure an additional UPN suffix so that Northwind Traders has one unified logon method for both local and remote users, and so that those users not have to know which domain their user accounts belong to Northwind Traders did not want the logon suffix to match the default SMTP e-mail suffix, so we also modified the default recipient policy so that the users’ SMTP addresses would not match their logon names THIS PAGE INTENTIONALLY LEFT BLANK ... uses Active Directory !" Explain how Exchange 2000 works with DSAccess !" Design Active Directory Groups for an Exchange 2000 organization 2 Module 2: Analyzing Active Directory for Exchange 2000. .. multiple Active Directory forests and Exchange 2000 organizations 10 Module 2: Analyzing Active Directory for Exchange 2000 Multiple Forest Design Considerations When you are designing an Exchange 2000. .. process, and how Exchange 2000 detects and defines servers running Active Directory Module 2: Analyzing Active Directory for Exchange 2000 21 Exchange 2000 Access to Active Directory Topic Objective