COEXISTENCE WITH MICROSOFT EXCHANGE SERVER 5.5 Appendix A

2 OVERVIEW Connecting Exchange Server 5.5 to Active Directory Installing Exchange Server 2003 into an existing Exchange Server 5.5 organization Troubleshooting connectivity between Active Directory and Exchange Server 5.5 Connecting Exchange Server 5.5 to Active Directory Installing Exchange Server 2003 into an existing Exchange Server 5.5 organization Troubleshooting connectivity between Active Directory and Exchange Server 5.5

3 CONNECTING EXCHANGE SERVER 5.5 TO ACTIVE DIRECTORY Installing the Active Directory Connector (ADC) Using ADC Tools Setting up a connection agreement manually Installing the Active Directory Connector (ADC) Using ADC Tools Setting up a connection agreement manually

4 INSTALLING THE ACTIVE DIRECTORY CONNECTOR Three versions of the ADC exist: The Microsoft Windows 2000 Server version The Microsoft Exchange 2000 Server version The Exchange Server 2003 version Three versions of the ADC exist: The Microsoft Windows 2000 Server version The Microsoft Exchange 2000 Server version The Exchange Server 2003 version

5 PLANNING FOR ADC DEPLOYMENT Resource-intensive Preferably install on a member server Single instance of the ADC service on a given server Install on multiple servers in a domain for redundancy At least one instance of the ADC service in each domain Resource-intensive Preferably install on a member server Single instance of the ADC service on a given server Install on multiple servers in a domain for redundancy At least one instance of the ADC service in each domain

6 ADC INSTALLATION Installation account in Schema Admins and Enterprise Admins Run ForestPrep and DomainPrep prior to installing the ADC Subsequent installations require only Enterprise Admins membership Windows 2000 Server SP3 or later (or Windows Server 2003) Exchange Server 5.5 SP3 or later Installation account in Schema Admins and Enterprise Admins Run ForestPrep and DomainPrep prior to installing the ADC Subsequent installations require only Enterprise Admins membership Windows 2000 Server SP3 or later (or Windows Server 2003) Exchange Server 5.5 SP3 or later

7 SELECTING ADC COMPONENTS TO INSTALL

8 CONNECTION AGREEMENT Defines one- or two-way communication between data sources Exchange Server 5.5 directory and Active Directory: Example—Exchange 5.5 mailboxes replicated into Active Directory user accounts Configured using Active Directory Connector Services console: Configure using ADC Tools Manual configuration Defines one- or two-way communication between data sources Exchange Server 5.5 directory and Active Directory: Example—Exchange 5.5 mailboxes replicated into Active Directory user accounts Configured using Active Directory Connector Services console: Configure using ADC Tools Manual configuration

9 ADC TOOLS

10 USING ADC TOOLS Define the settings Enter information about Exchange 5.5 sites Run the Resource Mailbox Wizard Run the Connection Agreement Wizard Define the settings Enter information about Exchange 5.5 sites Run the Resource Mailbox Wizard Run the Connection Agreement Wizard

11 STEP 1: DEFINING THE SETTINGS

12 STEP 2: COLLECTING DATA Identifies the following: User accounts associated with multiple Exchange Server 5.5 mailboxes Exchange Server 5.5 objects that do not match any objects in Active Directory Active Directory objects that do not match any objects in Exchange Server 5.5 Identifies the following: User accounts associated with multiple Exchange Server 5.5 mailboxes Exchange Server 5.5 objects that do not match any objects in Active Directory Active Directory objects that do not match any objects in Exchange Server 5.5

13 STEP 3A: RUNNING THE RESOURCE MAILBOX WIZARD Selecting Primary and Resource Mailboxes

14 STEP 3B: RUNNING THE RESOURCE MAILBOX WIZARD Establishing Administrative Credentials

15 STEP 4: RUNNING THE CONNECTION AGREEMENT WIZARD Select a default Windows destination Choose a two-way or one-way agreement Provide credentials for both the Exchange Server 5.5 site and the Active Directory domain Choose a connection agreement: Public folders Users Select a default Windows destination Choose a two-way or one-way agreement Provide credentials for both the Exchange Server 5.5 site and the Active Directory domain Choose a connection agreement: Public folders Users

16 INSTALLATION SUMMARY

17 SETTING UP A CONNECTION AGREEMENT MANUALLY

18 INSTALLING EXCHANGE SERVER 2003 INTO AN EXISTING EXCHANGE SERVER 5.5 ORGANIZATION Directory synchronization established Now deploy Exchange Server 2003 Two methods of doing this: Upgrade Exchange Server 5.5 to Exchange Server 2003 (by way of Exchange 2000 Server) Install Exchange Server 2003 as an additional server alongside existing Exchange Server 5.5 servers Directory synchronization established Now deploy Exchange Server 2003 Two methods of doing this: Upgrade Exchange Server 5.5 to Exchange Server 2003 (by way of Exchange 2000 Server) Install Exchange Server 2003 as an additional server alongside existing Exchange Server 5.5 servers

19 USING EXCHANGE SERVER DEPLOYMENT TOOLS

20 EXCHANGE SERVER DEPLOYMENT TOOLS UserCount VerCheck OrgCheck PolCheck OrgNameCheck PubFoldCheck ADCConfigCheck ADCObjectCheck ADCUserCheck RecipientDSInteg ConfigDSInteg DSConfigSum DSObjectSum ADUserScan PrivFoldCheck

21 MIXED-MODE SERVERS Exchange Administrator manages Exchange Server 5.5 servers Exchange System Manager manages Exchange Server 2003 servers Active Directory Users And Computers manages mailboxes on both Exchange Administrator manages Exchange Server 5.5 servers Exchange System Manager manages Exchange Server 2003 servers Active Directory Users And Computers manages mailboxes on both

22 EXCHANGE ATTRIBUTES ON MAILBOXES Exchange Server 5.5 Mailbox

23 EXCHANGE ATTRIBUTES ON MAILBOXES Exchange Server 2003 Mailbox

24 SITE REPLICATION SERVICE (SRS) Installed and configured automatically during Exchange Server 2003 setup Runs only in a mixed-mode Exchange environment Provides mail-based directory replication Enables Exchange Server 2003 to use Exchange Server 5.5 connectors Installed and configured automatically during Exchange Server 2003 setup Runs only in a mixed-mode Exchange environment Provides mail-based directory replication Enables Exchange Server 2003 to use Exchange Server 5.5 connectors

25 TROUBLESHOOTING CONNECTIVITY BETWEEN ACTIVE DIRECTORY AND EXCHANGE SERVER 5.5 Merging duplicate accounts Troubleshooting the ADC Troubleshooting the SRS Merging duplicate accounts Troubleshooting the ADC Troubleshooting the SRS

26 MERGING DUPLICATE ACCOUNTS Merging multiple directories might result in duplicate accounts Sometimes both accounts contain information that needs to be preserved The Active Directory Account Cleanup Wizard merges duplicate accounts Merging multiple directories might result in duplicate accounts Sometimes both accounts contain information that needs to be preserved The Active Directory Account Cleanup Wizard merges duplicate accounts

27 IDENTIFYING ACCOUNTS TO BE MERGED

28 REVIEWING ACCOUNTS TO BE MERGED

29 MERGING ACCOUNTS

30 TROUBLESHOOTING THE ADC Usually related to replication issues Exchange Server 5.5 to Active Directory Active Directory to Exchange Server 5.5 Usually related to replication issues Exchange Server 5.5 to Active Directory Active Directory to Exchange Server 5.5

31 BASIC ADC TROUBLESHOOTING Is the ADC service running? Is a connection agreement configured? Is the container displayed in the Export Containers list? Is the Exchange Server 5.5 computer turned on and running? Is the Exchange Server 5.5 directory service running on the server? If there is only one Active Directory server, is it online? Is the ADC service running? Is a connection agreement configured? Is the container displayed in the Export Containers list? Is the Exchange Server 5.5 computer turned on and running? Is the Exchange Server 5.5 directory service running on the server? If there is only one Active Directory server, is it online?

32 BASIC ADC TROUBLESHOOTING (CONT.) Did you select the object class on both the From Windows and From Exchange tabs? Did you select the directions that you want to replicate information to and from? Is the connection agreement configured to replicate in the direction you need? Does the user account that you are using on the target directory have sufficient permissions? Are any error messages logged in the server application log? Did you select the object class on both the From Windows and From Exchange tabs? Did you select the directions that you want to replicate information to and from? Is the connection agreement configured to replicate in the direction you need? Does the user account that you are using on the target directory have sufficient permissions? Are any error messages logged in the server application log?

33 TROUBLESHOOTING REPLICATION FROM EXCHANGE SERVER 5.5 TO ACTIVE DIRECTORY Exchange object A matches Active Directory object B; Active Directory object B was deleted Exchange object A matches Active Directory object B; Active Directory object B is not in a domain to which the ADC can write The connection agreement is not an interorganization connection agreement; ADC is matching a mailbox to a mail-enabled user Exchange object A matches Active Directory object B; Active Directory object B was deleted Exchange object A matches Active Directory object B; Active Directory object B is not in a domain to which the ADC can write The connection agreement is not an interorganization connection agreement; ADC is matching a mailbox to a mail-enabled user

34 TROUBLESHOOTING REPLICATION FROM EXCHANGE SERVER 5.5 TO ACTIVE DIRECTORY The connection agreement is not an interorganization connection agreement; ADC is matching a custom recipient or a distribution list to a mailbox-enabled user The server is not a bridgehead server for Active Directory The connection agreement is not an interorganization connection agreement; ADC is matching a custom recipient or a distribution list to a mailbox-enabled user The server is not a bridgehead server for Active Directory

35 TROUBLESHOOTING REPLICATION FROM ACTIVE DIRECTORY TO EXCHANGE SERVER 5.5 Active Directory object A matches Exchange Server 5.5 object B; Exchange Server 5.5 object B deleted Active Directory object A matches Exchange Server 5.5 object B; Exchange Server 5.5 object B not in the same site as the specified Exchange Server 5.5 server The connection agreement is not the primary connection agreement for the Exchange organization The object in Active Directory does not contain information Active Directory object A matches Exchange Server 5.5 object B; Exchange Server 5.5 object B deleted Active Directory object A matches Exchange Server 5.5 object B; Exchange Server 5.5 object B not in the same site as the specified Exchange Server 5.5 server The connection agreement is not the primary connection agreement for the Exchange organization The object in Active Directory does not contain information

36 DIAGNOSTIC LOGGING

37 LOGGING CATEGORIES Replication Account management Attribute mapping Service controller LDAP operations Replication Account management Attribute mapping Service controller LDAP operations

38 TROUBLESHOOTING THE SRS Is SRS running on an Exchange Server 2003 server? Is the Config_CA connection agreement configured properly? Is the LDAP port number correct? Can traffic reach the LDAP port on the server running SRS? Re-create the connection agreement and remove the existing one Create a new SRS and remove the existing one Is SRS running on an Exchange Server 2003 server? Is the Config_CA connection agreement configured properly? Is the LDAP port number correct? Can traffic reach the LDAP port on the server running SRS? Re-create the connection agreement and remove the existing one Create a new SRS and remove the existing one

39 SUMMARY ADC used to connect Exchange Server 5.5 to Active Directory Connection agreement required You can install Exchange Server 2003 into an existing Exchange Server 5.5 organization You can also upgrade Exchange Server 5.5 to Exchange 2000 Server and then to Exchange Server 2003 Duplicate accounts need to be merged; this is not straightforward because Exchange 5.5 mailboxes are not integrated with Active Directory user accounts ADC used to connect Exchange Server 5.5 to Active Directory Connection agreement required You can install Exchange Server 2003 into an existing Exchange Server 5.5 organization You can also upgrade Exchange Server 5.5 to Exchange 2000 Server and then to Exchange Server 2003 Duplicate accounts need to be merged; this is not straightforward because Exchange 5.5 mailboxes are not integrated with Active Directory user accounts