Daniel Kenyonsmith httpblogstechnetcomdanielkenyonsmithdefaultaspx Introduction Daniel Kenyonsmith Audience Discovery Exchange 55 Exchange 2000 or 2003 Exchange 2007 What Will We Cover ID: 652443
Download Presentation The PPT/PDF document "Recipient Management, Policies, and Perm..." is the property of its rightful owner. Permission is granted to download and print the materials on this web site for personal, non-commercial use only, and to display it on your personal computer provided you do not modify the materials and that you retain all copyright notices contained in the materials. By downloading content from our website, you accept the terms of this agreement.
Slide1
Recipient Management, Policies, and Permissions in Exchange 2007
Daniel Kenyon-smith
http://blogs.technet.com/danielkenyon-smith/default.aspx Slide2
Introduction
Daniel Kenyon-smith Slide3
Audience Discovery
Exchange 5.5Exchange 2000 or 2003
Exchange 2007 Slide4
What Will We Cover?
Recipient management model updateAdministrative permission model overview
AdministrativeSlide5
Level 300
Helpful Experience
IT administration experience with Microsoft Exchange Server 2003, Exchange 2000 Server, or Exchange Server 5.5Slide6
Using the Exchange 2007 Toolset
New ways of workingManaging RecipientsNew recipient types
Understanding Administrative PermissionsSplit permission model
Delegation
AgendaSlide7
Make it simple, intuitive, and organizedEnable administrative automation
Design PrinciplesSlide8
Using the Exchange 2007 Toolset
Managing RecipientsUnderstanding Administrative PermissionsAgendaSlide9
PowerShell Engine
Exchange cmdlets
AD*
Registry
Files
E2007
Store
Process
boundary
* AD=Active Directory
Exchange 2007 Management ModelSlide10
PowerShell
Engine
Exchange cmdlets
AD*
Registry
Files
E2007
Store
Process
boundary
Command-line
* AD=Active Directory
Exchange 2007 Management ModelSlide11
PowerShell
Engine
Exchange cmdlets
AD*
Registry
Files
E2007
Store
Process
boundary
WinForms
PowerShell data provider
Command-line
Graphical
* AD=Active Directory
Exchange 2007 Management ModelSlide12
Exchange System ManagerSlide13
Exchange Management Console
Console tree
1
1
Result pane
2
2
Work pane
3
3
Action pane
4
4Slide14
Wizard InterfaceSlide15
The Shell is a powerful and flexible command-line interface Built on command-line PowerShell technology
from WindowsExtends functionality of the Exchange Management ConsoleSupports automation and bulk operations Enables administrators to write secure automation scripts
Exchange Management ShellSlide16
Exchange Management Shell Continued
Object-oriented data handling Namespaces enable groups or families of related commandsPipeliningAccess to CMD commands
Trusted scriptsSlide17
Why Use the Shell?One-liners
Raw modeWhatif?InteractiveSlide18
Using the Exchange 2007 Toolset
Managing RecipientsUnderstanding Administrative PermissionsAgendaSlide19
ChallengesImprove poor separation between Active Directory and Exchange administration
Make implementation of split-permissions model easierSlide20
Mailbox Components
Active Directory
User
John Smith
Exchange 2007
Mailbox
John Smith
User Mailbox – John SmithSlide21
Challenges ContinuedAutomate user management
Solve Recipient Update Service problemsAdmin role delegation needs to be more granularSlide22
Simplified recipient provisioningInstant-on recipients Rich filtering supportNew recipient types
Policy support for select mailbox settingsWhat’s NewSlide23
What’s NewUnified MessagingNew and improved client functionality
Information worker functionalitySlide24
Explicit Recipient Types
Recipient types are now explicit versus implicit
Visual indicatorFiltering on typeSlide25
MailboxesMailboxUser
SharedMailbox LinkedMailbox LegacyMailboxCatch-All MailboxSlide26
Resource Mailboxes
ConferenceRoomMailboxEquipmentMailboxSlide27
Contacts
MailEnabledContact MailEnabledUserSlide28
Distribution Groups
MailEnabledUniversalSecurityGroup MailEnabledUniversalDistributionGroup
MailEnabledNonUniversalGroup
MailEnabled
DynamicDistributionGroupSlide29
Recipient types Exchange 2007Slide30
Public FoldersDeemphasized in 2007
Supported through the ShellMixed environments still use public foldersSlide31
Rich FilteringServer and Recipient Configuration workcenter can filter objects
Support for up to 10 expressionsSupport for AND and ORSlide32
Recipient ScopingDomain- and forest-wide scoping supported
Results size limited to 1,000, but can be overriddenConsole uses same list of GCs and DCs used by ServicesSlide33
PickersSlide34
Demo
Locating Recipients
Work with Recipient Types
Use Filtering
Use Domain and Forest Scoping
demonstrationSlide35
Enable/DisableEnable/Disable
Adds or removes Exchange attributes from existing Active Directory objectsSlide36
New/RemoveCreates or deletes Active Directory objects and adds or removes Exchange attributesSlide37
Demo
Creating Recipients
Create and Manage Mailboxes
Create Distribution Groups and Dynamic Distribution Groups
Create Contacts
Disable or Remove Recipients
demonstrationSlide38
Restore mailboxesSimplified proxy address Advanced settings
Mailbox Management UpdatesSlide39
Exclusive use of universal groups to avoid DL expansion problems in multidomain environmentsSimplified proxy addressAdvanced settings
Distribution Group Management UpdatesSlide40
Created pre-defined filtersSimplified proxy addressAdvanced settings
Dynamic Group Management UpdatesSlide41
Created pre-defined filtersMailbox Manager functionality separated from e-mail address policiesAbility to schedule creation and application of e-mail address policies
E-mail Address Policy UpdatesSlide42
RUS no longer neededAutomatic update of e-mail address policy Advanced settings
E-mail Address Policy Updates ContinuedSlide43
Created pre-defined filtersAbility to schedule creation and application of address lists RUS no longer neededAdvanced settings
Address List UpdatesSlide44
Public folder distribution optional, but still supported New HTTP(S)-based distribution mechanismAdvanced features
Offline Address List UpdatesSlide45
General Recipient ManagementUse Templates to Create Recipients
Secure Recipient TemplatesSet storage quotas on a mailboxSet delivery options on a mailboxAdd a new e-mail address to a mailboxPolicy support for a mailboxSlide46
Using the Exchange 2007 ToolsetManaging Recipients
Understanding Administrative PermissionsAgendaSlide47
Exchange 2003 Security and Permissions ModelExchange Full Administrator
Exchange AdministratorExchange View Only AdministratorSlide48
How Things Have Changed
Admin Groups
Exchange
200x
Exchange 5.x
Sites
Exchange
2007
GranularSlide49
Why We Made ChangesSeparate Admins for Exchange and AD
A lack of granularityPerceptionNo clear separationSlide50
New Administration ModelNew administrator rolesExchange Management Console
Exchange Management ShellSlide51
More granular delegation abilitiesIncorporated usage of universal security groups to represent the different rolesAuthorization same as Exchange 2003
What’s NewSlide52
Setup creates a USG for each admin role in forest root domainSID of each USG is granted rights on all the Exchange objects and property sets Coexistence with Exchange 2003 delegation model works – permissions are additive
Universal Security Group UsageSlide53
Exchange-specific Active Directory property setsACL-ing is based on new property sets, not individual attributes
Exchange-information property setExchange-personal information property setProperty SetsSlide54
Global dataServer dataRecipient dataHierarchy maps to admin roles and console navigation tree
Data HierarchySlide55
RolesSlide56
Exchange Server AdminExchange Recipient Admin
Role-Effective RightsSlide57
Demo
Delegating Admin Roles
Use the Delegate
Wizard
Configure mailbox permissions
Set Advanced Permissions from the Shell
demonstrationSlide58
Session SummaryRecipient management is simple, intuitive, and organized
Split permissions is now supportedPermissions model more granularSlide59
www.microsoft.com/technet/EXC-106
Visit TechNet at:
www.microsoft.com/technetVisit the following site for additional information:
For More InformationSlide60
Exchange 2007 Public Beta Be the first to know about upcoming Microsoft betas! Register to receive updates on the Exchange 2007 public beta through a customized Microsoft TechNet Flash newsletter! Find out more here:
http://www.microsoft.com/technet/prodtechnol/beta/preregister.mspxSlide61
This book can be purchased at all major bookstores and online retailers
Non-Microsoft PublicationsSlide62
Course ID
Title
3910
Getting Started with Microsoft
Exchange Server 2007 Clinic
3911
Getting Started with Microsoft
Exchange Server 2007 HOL
For training information and availability:
www.microsoft.com/learning
Training ResourcesSlide63
Self-study learning tool free to anyoneDetermines skills gapsProvides learning plans
Post your score; see how you stack up
Visit:www.microsoft.com/assessment
Readiness
with Skills AssessmentSlide64
Become a Microsoft Certified Professional
What are MCP certifications?Validation in performing critical IT functions
Why certify?Wide recognition of skills gained through experienceMore effective deployments with reduced costs
What certifications are there for IT pros?
MCP, MCSE, MCSA, MCDST, MCDBA
www.microsoft.com/learning/mcpSlide65
www.microsoft.com/technet/subscriptions
Heard the News About TechNet?
Software without time limits
Complimentary technical support
The most current resources on handSlide66
Find all these support options at
www.microsoft.com/technet/support
Microsoft offers a progressive series of support options starting with no-charge online support and developing through subscription, incident, and contract support.
1. No-Charge Online
Support
Knowledge Base
Search a vast database of articles to pinpoint the information you need.
Newsgroups
Access over 20,000 active newsgroups on scores of topics.
Product Support Centers
Get answers to frequently asked questions, plus how-to articles and step-by-step instructions organized
by product.
DLL Help Database
Search here to identify the software used to install a specific DLL version.
Events and Errors Message Center
Resolve event and error messages fast with explanations, recommendations, and links to support and resources.
Support Webcasts
Tune in to live technical presentations by Microsoft experts and take part in real-time Q&A.
Chats
Chat online with Microsoft specialists
or search the transcript archives.
User Group Program
Access information and support for IT and other interest-specific user groups.
TechNet Security Resource Center
Get ahead of security risks with
resources that keep you current,
including security newsletters and
the Microsoft notification service.
2. Subscription-Based
Support
TechNet Subscription
Subscribe to TechNet for a personal
library of articles, service packs, how-to’s, resource kits, tools, utilities, and more. Your subscription includes monthly updates delivered on CD or DVD, so you always have the latest information,
straight from the source.
Upgrade to a TechNet Plus subscription and add all this:
1.
Full-version evaluation software, including Microsoft Office
System and Windows Server System™ products, without
time restrictions.
2.
Free support — two complimentary incidents, plus a discount on other support calls.
3.
Unlimited, next-business-day
access to reliable answers from
the IT community and Microsoft
Support Professionals through Managed Newsgroups (English only).
3. Assisted Incident
Support
E-mail Support
Get online incident help via e-mail from a Microsoft Support Professional.
Phone Support
Get incident help over the phone from a Microsoft Support Professional.
Phone Support Contract
Save with a discounted 5-Pack Phone Support contract.
Advisory Services
Add remotely delivered consultation options from Microsoft Advisory Services for proactive support that goes far beyond routine product maintenance.
4. Contract-Based
Support
Premier Support
Get the flexibility to match support
options to your organization and
enjoy direct access to Microsoft
technical experts at any time, day
or night. Premier Support delivers customized options for businesses
with complex needs, including
dedicated technical professionals to oversee your support, 24x7 problem resolution, and training and workshops that keep your IT staff up to date.
Essential Support
Essential Support offers prepackaged options specifically designed to meet
the fundamental support requirements
of any business, large or small. Includes account management, problem
resolution, and information services.Slide67
Free chats and webcasts
List of newsgroups
Microsoft community sites
Community events and columns
Where Else Can I Get Help?
www.microsoft.com/technet/communitySlide68
© 2004 Microsoft Corporation. All rights reserved.
This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.
Q & A