1. Fast, Flexible Deployment and Configure Exchange Server 2003 Smith Mangmeetakun Technology Specialist Microsoft (Thailand) Limited

2. Agenda  Configure the common messaging tasks  Mailboxes & E-mail Management  Manage Message Routing  Backup and Disaster Preparedness  Best Practice Validation: ExBPA (Exchange Best Practice Analyzer)  Messaging Hygiene (Anti-Virus & Anti-Spam)  Secure Implementing to publish Exchange Server to Internet  Fast & Flexible monitoring Exchange 2003 Health Status

3. Mailbox & E-mail Management  The common problems  Incompatibility MIME/Non-MINE Character set from non-specific charset message  Thai (Windows-874) and UTF-8  Manage multiple e-mail domain  Disk Quota polity management  Deleted items  Send/Receive message size policy  Distribution Group Management

4. Mailbox & E-mail Management  Internet Message Format  Multiple Mailbox Store  Query-based Distribution Group

5. Management Message Routing  The common problems  Sending & Receiving message size restriction  Specific message routing path  Co-exist with another mail system  Bulk outgoing e-mail interrupt day-to-day operation  Note: First turn-on Connector Delivery Restrictions from article 277872

6. Management Message Routing  Send/Receive message restriction  Schedule Message Delivery

7. Backup and Disaster Preparedness  Backup Preparedness  Create and maintain a backup policy  Separate Information Store and System State backup in Windows Backup 2003  Do not overlook the IIS Metabase  Disaster Recovery Features  Deleted Mailbox Retention  Recovering from a disaster  Recovery Storage Group  Dial-Tone method  Alternate Server Recovery

8. Disaster Recovery Features Dial-Tone Method: What and How  Purpose: to minimize user downtime when recovering from a backup.  Example situation: Corrupted Mailbox Store.  Requirements (preparations):  Recent backup  Cumulative log files  Recovery Storage Group  Exchange features used.  Recovery Storage Group  Exmerge 2003  Mailbox Store re-creation

9. Recovering from a disaster

10. Microsoft Exchange Server Best Practice Analyzer Tool (ExBPA) ExBPA is a diagnostic tool that will interrogate an Exchange deployment and gather configuration settings and perform tests and then analyze the results and generate a report on issues found. ExBPA can be used in a variety of ways, including: As part of a customer health check, it can collect detailed information on a customer deployment and look for well-known miss-configuration issues or other problems. As part of a PSS issue, it can be used to do the initial data gathering from the customer and automate some of the analysis needed.

11. ExBPA Architecture  One tool runs against all versions of Exchange  You generally install the tool on a Windows XP workstation, and it remotely collects the data  Don’t need to install any components on the server  ExBPA is written in managed code (C#)  Input/output data model is XML based  Analysis engine is based on XPath Internet Configuration Help Detailed Articles ExBPACore Engine Dispatcher Collectors Analyzer User Interface Data File Internet Configuration Help Detailed Articles ExBPACore Engine Dispatcher Collectors Analyzer Data File Active Directory Exchange Server Exchange Server Exchange Server

12. ExBPA in action

13. E-mail Hygiene  E-mail hygiene is more than just AV/AS  Threats:  Virus infected e-mail  UCE/Spam e-mail  Denial of Service (DoS) attacks  Mail bombing and NDR attacks  Directory Harvesting Attacks (DHA)  E-mail impersonation (spoofing) and phishing attacks  Unauthorized e-mail submission and relay

14. Gateway Server Transport Exchange Server 2003 Mailbox Server Store Junk Mail Folder Junk Mail Folder Inbox Exchange 2003 OWA Outlook 2003 SCL = Spam Confidence Level Exchange/Outlook Anti-Spam Integration Spam ? User Safe & Blocked Senders Exchange IMF ISV Products Allow/Deny Lists DNS Block Lists Recipient & Sender Filtering Message + SCL Spam ? User Safe & Blocked Senders Inbox User Safe & Blocked Senders

15. Overview of Exchange Server 2003 and antivirus software  File-level scanners  MAPI scanners  Virus scanning API scanners  ESE-based scanners 823166823166 Overview of Exchange Server 2003 and antivirus software

16. Email Hygiene

17. Secure Implementing to publish Exchange Server to Internet Integrated with ISA Server 2004 to provide following features:  Mail Server Publishing Wizards:  OWA – Web browser clients  OMA, ActiveSync – PDAs, SmartPhones and other Windows Mobile devices  RPC/HTTP – Outlook 2003  Full Outlook MAPI client – all versions of Microsoft Outlook (except Outlook Express)  Integrated SMTP Protection  Enforcing compliance of SMTP commands with Internet standards  Blocking disallowed SMTP commands (e.g, NOOP)  Buffer overflow protection  SMTP message pre-screening and processor offloading with attachment and keyword filtering  Firewall capabilities:  Application layer inspection  Authentication solutions  Firewall protection  Logging and Monitoring  RPC filtering

18. ISA 2004 Integrated

19. Exchange Management Pack for Microsoft Operations manager Helps Increase Server Availability  Included with Exchange 2003*  Out-of-box monitoring and alerting for Exchange  Complete monitoring for solution: >1700 rules  Enhances server availability through proactive server management  Provides monitoring of client, server and Active Directory  Built-in knowledge reduces issue resolution time

20. Exchange Management Pack for Microsoft Operations manager

21. Session Summary  This session demonstrate how to configure your Exchange Server 2003 in a proper way to help you meet the time constraint.  Mailboxes Management  E-mail management  Message Routing  Backup & Restore  Best Practice Validation: ExBPA (Exchange Best Practice Analyzer)  Messaging Hygiene (Anti-Virus & Anti-Spam)  Integrated with ISA 2004  Integrated with MOM 2005 (Management Pack)

22. © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

23. Appendix  XCON: Connector Delivery Restrictions May Not Work Correctly  Disaster Recovery Features Dial-Tone Method: 4 Steps  Exposing SCL (Spam Confidence Level) in Outlook  File-level scanners – Exclusion paths  Exchange Resource Sites

24. XCON: Connector Delivery Restrictions May Not Work Correctly PSS ID Number: 277872  Start Registry Editor (Regedt32.exe).  Locate and click the following registry key: HKEY_LOCAL_MACHINE/System/CurrentControlSet/Ser vices/Resvc/Parameters/  On the Edit menu, click Add Value, and then add the following registry value: Value Name: CheckConnectorRestrictions Data Type: REG_DWORD Radix: Hexadecimal Value: 1  Quit Registry Editor.  Restart the Microsoft Exchange Routing Engine service and the Simple Mail Transfer Protocol (SMTP) services for this change to take effect.

25. Disaster Recovery Features Dial-Tone Method: 4 Steps 1. Remove Corrupted database. Exchange creates a blank store (the “Dial-tone” database) 2. Restore from backup to Recovery Storage Group 3. Swap the Recovery Storage and Dial-tone files. 4. Exmerge Dial-tone database into Recovered database.

26. Exposing SCL (Spam Confidence Level) in Outlook SCL.CFG: ;**********The CFG file********** [Description]MessageClass=IPM.Note CLSID={00020D31-0000-0000-C000- 000000000046} DisplayName=SCL Extension Form Category=StandardSubcategory=Form Comment=This forms allows the SCL to be viewed as a column LargeIcon=IPML.icoSmallIcon=IPMS.icoVersion=1.0Locale=enuHidden=1 Owner=Microsoft Corporation Contact=Your Name [Platforms]Platform1=Win16Platform2=NTx86Platform9=Win95[Platform.Win16]CPU=ix86OSVersion=Win3.1[Platform.NTx86]CPU=ix86 OSVersion=WinNT3.5[Platform.Win95]CPU=ix86OSVersion=Win95[Properties]Property01=SCL[Property.SCL]Type=3NmidInteger=0x4076DisplayName=SCL[Verbs]Verb1=1[Verb.1]DisplayName=&OpenCode=0Flags=0Attribs=2[Extensions]Extensions1=1[Extension.1]Type=30 NmidPropset={00020D0C-0000-0000-C000- 000000000046} NmidInteger=1Value=1000000000000000 ;**********END CFG

27. Exposing SCL (Spam Confidence Level) in Outlook (cont) 1. 1. Go into Tools | Options | Other | Advanced Options | Custom Forms | Manage Forms 2. 2. Hit the Install button, and choose SCL.CFG …install into your Personal Forms Library 3. 3. Hit OK several times to return to the main Outlook screen 4. 4. Right-click on the Column headings in your Inbox (other any other folder) and choose "Field Chooser" 5. 5. Pull-down the scroll-bar and choose "Forms…" 6. 6. Set focus to your Personal Forms, choose the SCL Extension Form, then click Add 7. 7. Drag and drop the SCL property into your column headings …and voila!

28. File-level scanners – Exclusion paths Exclude the following folders  Exchange databases and log files (Exchsrvr\Mdbdata)  Exchange MTA files (Exchsrvr\Mtadata)  Additional log files (Exchsrvr\server_name.log)  The virtual server folder (Exchsrvr\Mailroot).  The working folder that is used to store streaming.tmp files  The temporary folder that is used in conjunction with offline maintenance  Site Replication Service (SRS) files (Exchsrvr\Srsdata)  Microsoft Internet Information Services (IIS) system files in the %SystemRoot%\System32\Inetsrv folder.

29. Exchange Resource Sites  Microsoft Exchange  http://www.microsoft.com/exchange http://www.microsoft.com/exchange  MS Exchange Org  http://www.msexchange.org http://www.msexchange.org  You Had Me At EHLO  http://blogs.technet.com/exchange/default.aspx http://blogs.technet.com/exchange/default.aspx  Exchange The Blog  http://msmvps.com/exchange http://msmvps.com/exchange  MS Exchange Blog  http://hellomate.typepad.com/exchange http://hellomate.typepad.com/exchange