Exchange 2000 - FAQ
Table of Contents Section 0 - Latest Changes Section I - Administrivia General housekeeping information about the FAQ itself. Section II - Definitions Definitions & terms used in describing Exchange 2000 and its environment. Section III - Installation Questions generally relating to installation preparation and the installation process itself. Section IV - Migration & Interoperability Questions related to Migration and Interoperability of Exchange 2000 with Exchange 5.5 and foreign mail systems. Section V - Administration & Maintenance The bulk of the Exchange 2000 related questions. Questions about day to day operations and other standard administrative tasks. Appendix A - Exchange 2000 Move Server Method Appendix B - Additional Resources Appendix C - What is the M: Drive? Appendix D - Disable SMTP Access Appendix J - Martin Blackstone's List of Danger
Exchange 2000 - FAQ
Exchange 2000 - FAQ
Section 0 - Latest Changes FAQ 1.04 / April 12, 2002 Section I 1.6 - Updated FAQ 1.03 / March 29, 2002 Appendix B Updated FAQ 1.02 / March 18, 2002 Section V 5.23 - Added FAQ 1.01 / March 11, 2002 Appendix J New FAQ 1.00 / February 7, 2002 Section III 3.18 - Added FAQ 0.9 / January 4, 2002 Appendix C New Appendix D New FAQ 0.8 / November 15, 2001 Section I 1.5 - Updated 1.6 - Updated Section V 5.22 - Added FAQ 0.7 / September 28, 2001
© 2002 Simpler-Webb, Inc. All rights reserved.
2
Exchange 2000 - FAQ
Section V 5.20 - Added 5.21 - Added
FAQ 0.6 / August 23, 2001 Section III 3.17 - Added Section V 5.3 - Updated FAQ 0.5 / May 4, 2001 Appendix A NEW FAQ 0.4 / Jan 25, 2001 Section III 3.16 - Added Section V 5.17 - Added 5.18 - Added 5.19 - Added FAQ 0.3 / Jan 3, 2001 Section I 1.4 - Updated 1.5 - Added Appendix B Added FAQ 0.2 / Dec 7, 2000 Section I 1.4 - Added Section II 2.7 - Added 2.8 - Added Section III 3.9 - Added 3.10 - Added
© 2002 Simpler-Webb, Inc. All rights reserved.
3
Exchange 2000 - FAQ
3.11 3.12 3.13 3.14 3.15
-
Added Added Added Added Added
Section IV 4.4 - Added Section V 5.13 - Added 5.14 - Added 5.15 - Added 5.16 - Added FAQ 0.1 / Nov 22, 2000 Initial Published Version
© 2002 Simpler-Webb, Inc. All rights reserved.
4
Exchange 2000 - FAQ
Exchange 2000 - FAQ
Section I - Administrivia 1.1 Q: Who maintains this FAQ? A: This FAQ is typed and maintained by Simpler-Webb, Inc. Large portions of it are directly, or indirectly, the result of the contributions of others. 1.2 Q: Who has contributed to this FAQ? A: There are many people who have contributed to the FAQs. We'd like to list them all, but we'd probably miss someone and then they'd feel slighted. Rather than do that, we instead acknowledge that we know who you are and we appreciate your efforts. 1.3 Q: Can I contribute to the FAQ? A: Absolutely! Submissions, suggestions and clarifications to the content of the FAQ are always appreciated. Whenever possible those received will be integrated into future versions of the FAQ. Please contact us. 1.4 Q: Are there other resources I ought to know about? A: Absolutely. We've compiled a list of some of our favorites in Appendix B: Additional Resources. 1.5 Q: How can I receive a copy of the mailing list archives? A: The mailing list archives for both the Exchange 2000 e-groups and Exchange swynk.com mailing lists are burned to CD on a quarterly basis. The 2002 First Quarter CD is now available from Simpler-Webb: 1. Exchange archives 1999-2002Q1 2. E2K e-groups 8/15/2000-2002Q1 We will need pre-payment of $10 (US) cash or check, $11 (US) for credit card. In-state customers please add 8.25% tax. We WILL NOT reply to any posts to the mailing list on this topic. We accept Visa, MasterCard and American Express - feel free to call us to order via credit card at +512.322.0071. The address is: Exchange List CD Simpler-Webb, Inc.
© 2002 Simpler-Webb, Inc. All rights reserved.
5
Exchange 2000 - FAQ
1214 W. Sixth Street, Suite 209 Austin, TX 78703 If you are overseas, please be kind enough to visit http://ircalc.usps.gov and add a reasonable airmail cost to your order. 1.6 Q: When is the 2002 MEC (Microsoft Exchange Conference)? A1: United States: Date and location to be determined. A2: International: Dates and locations to be determined.
© 2002 Simpler-Webb, Inc. All rights reserved.
6
Exchange 2000 - FAQ
Exchange 2000 - FAQ
Section II - Definitions 2.1 Q: What is forestprep? Forestprep extends the AD schema to include Exchange specific information. Additional information can be found on the Microsoft Exchange Server Site. 2.2 Q: What is domainprep? A: Domainprep creates the groups and permissions necessary for Exchange servers to read and modify user attributes. Additional information can be found on the Microsoft Exchange Server Site. 2.3 Q: What is a DC? A: A DC is a Windows 2000 Domain Controller that holds active directory for a domain (used for things like user authentication). 2.4 Q: What is a GC? A: A GC is a Global Catalog Server. A GC holds a full set of attributes for the domain in which it resides and a subset of attributes for all objects in the Active Directory Forest. 2.5 Q: What is DDNS and why do I need it? A: Dynamic DNS (described in RFC 2136) allows servers to dynamically update and create records in DNS. Dynamic DNS is used by the Exchange server to create server records and other entries used by the Exchange Servers for things like message routing. In a simple Exchange organization, DDNS is not strictly necessary, but makes administration much easier. "Windows 2000 DNS" (Landmark) is a good book on the subject. 2.6 Q: What is a border server? A: A border server is an Exchange server that communicates with external servers. In a single server organization, your server is by default a border server. In a multi-server configuration, you may have one or more dedicated servers that communicate directly or indirectly with foreign servers and then pass the mail to other internal Exchange servers. 2.7 Q: What is a mixed mode Exchange environment? A: An Exchange environment, which contains Exchange 2000 and Exchange 5.5 (or earlier) servers. 2.8 Q: How does an Exchange 5.5 site compare to an Exchange 2000 Routing Group or Administrative Group?
© 2002 Simpler-Webb, Inc. All rights reserved.
7
Exchange 2000 - FAQ
A: In a mixed mode Exchange environment the Exchange 2000 Administrative Group and Routing Group correspond to the Exchange 5.5 site. In a native Exchange 2000 environment, the Administrative Group is a group of Exchange objects sharing a common set of permissions and routing groups define how those servers communicate with one another. A single Administrative Group can contain several Routing Groups. Example: Your north American Exchange servers might be grouped in a single Administrative Group, but subdivided into several Routing Groups to optimize interserver communication. An Administrative Group contains zero or more Routing Groups.
© 2002 Simpler-Webb, Inc. All rights reserved.
8
Exchange 2000 - FAQ
Exchange 2000 - FAQ
Section III - Installation 3.1 Q: What's changed in Exchange 2000 compared to previous versions of Exchange? A: Lots of things have changed with Exchange 2000. Microsoft has written quite a bit about the new features, which can be found on the Microsoft Exchange 2000 - Server Features Overview Site. The following are a few articles from this site: • • • Enhanced Platform for Messaging and Collaboration Microsoft Web Storage System Collaboration and Applications Anytime, Anywhere Communication
Microsoft Exchange 2000 Server Datasheet. Some highlights include: • • • • SMTP is now the primary method for intra-server communication in a pure Exchange 2000 environment. Integration with Active Directory. Support for multiple information stores. Enhanced Outlook Web Access
3.2 Q: What do I need in order to install Exchange 2000? A. A partial list includes: • • • • • DNS (preferably DDNS) Active Directory Permissions to update the Schema Hardware sufficient to run Exchange 2000 Windows 2000 SP1 applied to all DCs, GC, and all (future) E2K servers.
3.3 Q: I'm running Exchange 4.0 and would like to upgrade to Exchange 2000. Can I upgrade directly? A: No. The only supported upgrade path is from Exchange 5.5 SP3 or later. You would need to first upgrade your Exchange 4.0 server to at least Exchange 5.5 SP3 and then upgrade to Exchange 2000. Another option is to exmerge out your current users, and exmerge them into an Exchange 2000 server. 3.4 Q: Can I install Exchange 2000 on Windows NT 4.0 or without using Active Directory? A: No. See Q. 3.2 3.5 Q: Can I rename or move the default groups created by Exchange during domainprep and forestprep?
© 2002 Simpler-Webb, Inc. All rights reserved.
9
Exchange 2000 - FAQ
A: Only if you want to horribly break your Exchange installation. 3.6 Q: How do I configure a Front End/ Back End topology? A: There is an excellent white paper on the subject available from Microsoft "Exchange 2000 Front-end and Back-end Topology". 3.7 Q: What are the minimum hardware requirements for Exchange 2000? A: The minimum practical hardware requirements in our experience are 1.25 times the disk space one would allocate under Exchange 5.5, 256MB RAM (512MB minimum if the Exchange server also serves any other function) and the fastest processor(s) you can afford. 3.8 Q: Am I better off with one really fast processor or two somewhat slower processors? A: You're better off with two really fast processors. But, with all other things being equal, two processors are better than one with Exchange 2000. In most instances, a 2-processor machine would be preferable. 3.9 Q: Can I have multiple Exchange 2000 organizations in a single forest? A: No. Only a single E2K organization can exist within a single forest. Delegation of administration within the organization can be accomplished using OUs in AD and Administrative/ Routing Groups in the Exchange system manager. 3.10 Q: Can an Exchange 2000 organization span multiple forests? A: No. All domains in a forest share a common schema and the Exchange organization exists within this configuration naming context. The GC, which provides the Global Address List is populated only with items within the forest. 3.11 Q: How can I merge multiple directories to create a unified Exchange organization? A1. Microsoft's Meta-Directory Services (MMS) A2. Compaq's LDAP Directory Synchronization Utility A3. CPS Systems' SimpleSync A4. ADSI (code, code code) 3.12 Q: Can I upgrade from the evaluation edition of Exchange 2000 Enterprise Server to the RTM standard version of Exchange 2000 Server?
© 2002 Simpler-Webb, Inc. All rights reserved.
10
Exchange 2000 - FAQ
A: No This is technically a downgrade from enterprise to standard. You can only upgrade the evaluation version of Exchange 2000 Enterprise to Exchange 2000 Enterprise RTM. 3.13 Q: How can you tell how many days remain until the evaluation copy of Exchange 2000 Server expires? A: The Exchange Server Setup Progress Log includes the date on which the Exchange server was installed. Take the difference between that date and today's date and subtract it from 120 to determine how many days remain in your evaluation. 3.14 Q: My evaluation version has expired! Are my databases toast? A: No. Install a full version of Exchange 2000 Enterprise and you can continue to use your existing databases. 3.15 Q: I plan to run Exchange in a hosted environment, where can I find information on how to configure my Exchange server to host multiple companies? A: Microsoft Service Providers 3.16 Q: What ports does Exchange use? A: A partial list of the ports your Exchange server might use is included below. If you're asking this question because you'd like to configure your firewall to allow users to connect using Outlook from the internet, we HIGHLY recommend you consider using VPN instead. (Do you really want to expose your GC to the possibility of attack from a 16 year old script kiddie?) • • • • • • • • • • • • • • • • • • • • • 25 SMTP 53 DNS 80 HTTP 88 Kerberos 102 X.400 110 POP3 119 NNTP 135 RPC 137 - Netbios Session Service 139 - Netbios Name Service 143 IMAP4 379 LDAP (SRS) 389 LDAP 443 HTTP (SSL) 445 - Netbios over TCP 465 SMTP (SSL) 563 NNTP (SSL) 636 LDAP (SSL) 691 LSA 993 IMAP4 (SSL) 994 IRC (SSL)
© 2002 Simpler-Webb, Inc. All rights reserved.
11
Exchange 2000 - FAQ
• • • • • • • • • • •
995 POP3 (SSL) 1503 T.120 1720 H.323 1731 Audio conferencing 1863 - MSN IM 3268 GC 3269 GC (SSL) 6667 IRC/IRCX 6891-6900 - MSN IM File transfer 6901 - MSN IM Voice 7801-7825 - MSN IM Voice
Additional information on Exchange ports and connecting through a firewall is included below. Remember, VPN is your friend. • • • Q280132 XCCC: Exc hange 2000 Windows 2000 Connectivity Through Firewalls Q270836 XCLN: Exchange 2000 Static Port Mappings Q278339 XGEN: TCP/UDP Ports Used By Exchange 2000 Server
3.17 Q: How do I add additional SMTP domains? A1: Setting Up SMTP Domains for Inbound and Relay E-Mail in Exchange 2000 Server - Q260973 A2: How to Receive Messages for Two SMTP Domains Using Exchange 2000 Q289833 3.18 Q: Q: How do I uninstall Exchange 2000? A1: MS Knowledge Base Articles: • • • Q260378 Q273478 Q264309
© 2002 Simpler-Webb, Inc. All rights reserved.
12
Exchange 2000 - FAQ
Exchange 2000 - FAQ
Section IV - Migration & Interoperability 4.1 Q: Can I use Exchange 2000's OWA to access a mailbox on an Exchange 5.5 server? A: No. The enhanced OWA is built directly into the store technology and only a mailbox residing on an Exchange 2000 server can be accessed using the enhanced OWA interface. Nice try, though. 4.2 Q: Can I use Exchange 5.5's OWA to access a mailbox on an Exchange 2000 server? A: Yes. 4.3 Q: How do I remove the ADC after moving all of my users to an Exchange 2000 server? A: First, you need to use the Exchange 5.5 Admin program to delete the directory replication connectors (Org | Site | Configuration | Connections). Once you have deleted the connections, you need to be logged on with an account with Schema Admin privileges to delete the ADC connector. 4.4 Q: How many Global Catalog servers should I deploy? A: There is no hard and fast rule in this regard. Some potential guidelines include: a. At least 1 per routing group b. One for every 4 Exchange servers in a routing group c. One (or more) for each physical location
© 2002 Simpler-Webb, Inc. All rights reserved.
13
Exchange 2000 - FAQ
Exchange 2000 - FAQ
Section V - Administration & Maintenance 5.1 Q: Under Exchange 5.5 I couldn't restore a single mailbox without 3rd party products. With Exchange 2000, is it any easier to restore a single mailbox or back up a single mailbox? A: Yes and no. Under Exchange 2000, a mailbox is not deleted immediately when an NT account is deleted. It can be reattached to a new user object following the steps described in the Microsoft Knowledge Base article "XADM: How to Recover a Deleted Mailbox in Exchange 2000" - Q274343. There is no built in mechanism for backing up a single Exchange mailbox. This would still require a 3rd party brick level backup utility. 5.2 Q: Can I back up the M: drive using NT Backup or another backup application? A: You can, but you will be sad. Do NOT back up the M: drive of an Exchange 2000 server. It can result in messages and attachments being inaccessible via the Outlook client. 5.3 Q: How can I prevent a user from sending and receiving Internet mail? A: Follow the steps outlined below: 1. Create a group called InternalOnly. 2. Create a recipient policy that gives them a fake SMTP address. i.e. @fake.domain. Leave the X400 address alone so they can receive internal mail. 3. Drill down through Routing Groups > Group Name > Connectors > SMTP internet connector(s), choose its properties. Choose the Delivery Restrictions tab, and under "reject", add this group. Do this for each connector. 4. Follow the steps in Q277872, regarding Connector Restrictions. [Now they can't use the SMTP connector(s) to send external mail] 5.4 Q: What tools are used to administer Exchange 2000? A1: Active Directory Users & Computers - Used to create users, distribution groups and contacts. A2: Exchange System Manager - Used to manage the Exchange Server, create address lists, recipient policies, etc... 5.5 Q: I created a user in AD Users and Computers, but in the Exchange system manager it doesn't appear under Mailbox Store | Mailboxes. What did I do wrong? A: Probably nothing. A mailbox will not appear under Mailbox Store | Mailboxes until either someone has logged into the mailbox or the mailbox
© 2002 Simpler-Webb, Inc. All rights reserved.
14
Exchange 2000 - FAQ
has received a mail message. Some administrators send a welcome message to a mailbox shortly after it has been created, which would cause it to appear. 5.6 Q: I created a secondary Public Folder Hierarchy, but only the original public folder hierarchy appears in Outlook. A: Current versions of Outlook only support a single public folder hierarchy. Secondary Public Folder hierarchies can be accessed with the web. 5.7 Q: In Exchange 5.5 I could have multiple mailboxes associated with a single user account. How do I do that in Exchange 2000? A: Exchange 2000 requires a user object for each mailbox. You can create a disabled user object, associate a mailbox with it, and then grant another user object 'receive as' and 'send as' permissions to that mailbox. 5.8 Q: What is the difference between 'receive as' and 'send as'? A: 'Receive as' allows a user object to open a mailbox. 'Send as' allows a user to send out a mail message as the mailbox that has been opened. 5.9 Q: How do I restrict a user or domain from sending mail to my users? A: First, add the address or domain you wish to filter to the Filtering Tab of the Message Delivery Global Settings. Next, you need to apply the filter to the SMTP virtual server you wish to filter. (Administrative Group | Server | Protocols | SMTP | | Properties | Advanced |