Microsoft Exchange 2003 Deployment And Migration

by Kieran McCorry

Overview

Microsoft® Exchange Server 2003 Deployment and Migration describes everything that you need to know about designing, planning, and implementing an Exchange 2003 environment. The book discusses the requisite infrastructure requirements of Windows 2000 and Windows 2003. Furthermore, this book covers, in detail, the tools and techniques that messaging system planners and administrators will require in order to establish a functioning interoperability environment between Exchange 2003 and previous versions of Exchange including Exchange 5.5 and Exchange 2000. Since Microsoft will drop support for Exchange 5.5 in 2004, users will have to migrate to Exchange 2003. Additionally the book describes various deployment topologies and environments to cater for a multitude of different organizational requirements.


* Details for consultants and system administrators to migrate from older versions of Exchange 5.5 and Exchange 2000
* Critical information on integration with Outlook 2003 and Windows 2003
* Based on actual implementations of both beta and final release versions of Exchange 2003 in larger enterprise environments

Product Details

ISBN-13:	9781555583163
Publisher:	Elsevier Science
Publication date:	09/01/2004
Series:	HP Technologies Series
Pages:	404
Product dimensions:	0.83(w) x 7.00(h) x 10.00(d)

About the Author

Kieran McCorry is a Principal Consultant in HP CI's Enterprise Microsoft Services Team, part of the Technology Leadership Group. Kieran works extensively with the planning, design, and implementation of messaging

infrastructures for many of HP's largest worldwide customers. A frequent speaker at many industry events such as Microsoft TechEd, Kieran is also a regular columnist in the Exchange and Outlook Administrator Newsletter

and writes frequently for Windows .Net Magazine. He is author of the book, Connecting Microsoft Exchange Server, (Digital Press, 1999) and co-author with Donald Livengood of the book, Exchange 2000

Infrastructure Design, (Digital Press, 2001).

Table of Contents

	Foreword	xiii
	Preface	xv
	What is This Book about?	xvi
	Intended Audience	xvii
	Acknowledgments	xix
1	Exchange 2003 Deployment Fundamentals	1
1.1	Introduction	1
1.2	Windows 2000/Windows 2003 Refresher	2
1.3	Exchange 2003 and Its Relationship to the Forest	5
1.4	The Importance of Domain Controllers and Global Catalog Servers	6
1.5	Choosing an Appropriate Domain Model	17
1.6	Universal Security Groups and Windows Domain Mixed-Mode Membership	19
1.7	Token Augmentation	19
1.8	Exchange 2003 Installation Requirements	20
1.9	Exchange System Manager on Windows XP	24
1.10	Exchange 2003 and Internet Information Services 6.0	25
1.11	Exchange 2003 Installation Improvements	26
1.12	Preparing and Planning for Deployment	28
1.13	DCDiag and NetDiag Utilities	29
1.14	Preparing Windows 2003 Domains for Exchange 2003	31
1.15	Installing Exchange 2000	36
1.16	Summary	37
2	Active Directory Connector Synchronization	39
2.1	Introduction	39
2.2	Active Directory Connector Core Technology Description	40
2.3	Connection Agreements	45
2.4	Active Directory Connector Schema Modifications	50
2.5	Determining Which Directory Objects to Synchronize	52
2.6	Active Directory Connector Block Searching	53
2.7	How the Active Directory Connector Uses the Active Directory	54
2.8	Mailbox-enabled and Mail-enabled Objects	55
2.9	Object Class Mapping from Exchange 5.5 to the Active Directory	55
2.10	Object Class Mapping from the Active Directory to Exchange 5.5	58
2.11	Synchronizing Hidden Objects	60
2.12	Dealing with Hidden Distribution List Membership	60
2.13	Object Deletion	61
2.14	Connection Agreements and Authentication	62
2.15	Controlling the Synchronization Schedule	65
2.16	Connection Agreement Advanced Parameters	67
2.17	Exchange 5.5 Mailboxes and Multiple Windows NT Accounts	71
2.18	Mailbox Delegate Access	72
2.19	Troubleshooting Active Directory Connector Synchronization Problems	74
2.20	The New Exchange 2003 Active Directory Connector Features	77
2.21	Summary	78
3	Advanced Active Directory Connector Configuration	79
3.1	Introduction	79
3.2	Default Object-Matching Behavior	80
3.3	How the Active Directory Connector Uses LDAP	81
3.4	Using a Customized LDAP Search Filter	82
3.5	Understanding LDAP Search Filters	82
3.6	Setting an LDAP Search Filter on a Connection Agreement	83
3.7	Default Active Directory Connector Object-Matching Behavior	84
3.8	Using Custom Object-Matching Rules on the Active Directory Connector	87
3.9	The NTDSNoMatch Utility	92
3.10	Summarizing Object-Matching Behavior	93
3.11	Introduction to Attribute Mapping	94
3.12	Default Attribute Mapping Behavior	94
3.13	Moving Beyond the Schema Mapping GUI	95
3.14	Active Directory Distinguished Name Mapping with the Exchange 2000 Active Directory Connector	102
3.15	Distinguished Name Mapping with the Exchange 2003 Active Directory Connector	104
3.16	Exchange 5.5 and LDAP Names	104
3.17	Attribute Mapping Rule Syntax	105
3.18	Summary	107
4	The Site Replication Service	109
4.1	Introduction	109
4.2	Positioning the Site Replication Service and the Active Directory Connector	109
4.3	Components that Comprise the Site Replication Service	110
4.4	The Site Replication Service in Intrasite Replication Operation	111
4.5	The Site Replication Service in Intersite Replication Operation	114
4.6	What Takes Place during a Bridgehead Server Upgrade?	116
4.7	Site Replication Service Management	117
4.8	Site Replication Service Preference	119
4.9	Summary	120
5	Public Folder Interoperability and Migration	123
5.1	Introduction	123
5.2	Public Folder Connection Agreements	123
5.3	Configuring Public Folder Connection Agreements	125
5.4	Public Folder Permissions	127
5.5	Exchange 5.5 and Exchange 2003 Public Folder Republication	128
5.6	Permission Handling during Mixed-Version Replication	130
5.7	Dealing with Zombie Users	132
5.8	Exchange 5.5 Distribution Lists and Access Control Lists	134
5.9	Public Folder Deployment Guidelines	135
5.10	Planning and Understanding Public Folder Topologies	136
5.11	Reintroducing Public Folder Affinity	137
5.12	Getting Ready to Migrate Public Folders	139
5.13	Moving User and System Public Folder Content	140
5.14	Using the Public Folder Migration Tool	142
5.15	Summary	143
6	Deployment and Interoperability Guidelines for the Active Directory Connector	145
6.1	Introduction	145
6.2	Why Native-Mode Windows 2000 or Windows 2003 Domains Are Best	145
6.3	Scenarios that Require Multiple Connection Agreements	147
6.4	Container Hierarchy Mapping	149
6.5	Moving Synchronized Objects between Containers	150
6.6	Using Multiple Active Directory Connectors	151
6.7	Exchange 5.5 Back-Replication	152
6.8	Connection Agreement Deployment Models	154
6.9	Deploying Active Directory Connectors	163
6.10	Network Impact from Active Directory Connector Synchronization	165
6.11	Summary	167
7	Moving from Exchange 5.5 to Exchange 2003	169
7.1	Introduction	169
7.2	Exchange 5.5 Migration Fundamentals	169
7.3	Making a Clean Break from Exchange 5.5	171
7.4	Exchange 5.5 Migration Terminology Refresher	172
7.5	The Importance of sID History During Exchange 5.5 Migration	173
7.6	Exchange 5.5, Windows Migrations, and the ClonePrincipal Toolkit	174
7.7	Requirements for Writeable Access to sIDHistory	175
7.8	Running Exchange 5.5 on Windows 2000 Servers	176
7.9	Exchange 5.5 to Exchange 2003 Migration Approaches	177
7.10	Active Directory Account Domain Cleanup Wizard	200
7.11	Summary	210
8	Moving from Exchange 2000 to Exchange 2003	211
8.1	Introduction	211
8.2	Exchange 2000 to Exchange 2003 Migration Approaches	211
8.3	Mixed Exchange 5.5/Exchange 2000 migrations to Exchange 2003	216
8.4	The Exchange 2003 Move Mailbox Wizard	217
8.5	Summary	227
9	Interorganization Migrations	229
9.1	Introduction	229
9.2	Deciding on an Interorganization Migration Approach	229
9.3	Using the Exchange Server Migration Wizard	230
9.4	Partial Organization Migrations	235
9.5	Third-Party Tool Approach to Interorganization Migration	241
9.6	Summary	262
10	Deploying Exchange for External Access	265
10.1	Introduction	265
10.2	Using Exchange 2003 Front-End Servers in the DMZ	265
10.3	Exchange, DSAccess, and Firewalls	267
10.4	Should You Allow RPCs across Your DMZ?	269
10.5	Generalized Internal-Facing Firewall Requirements	270
10.6	Outlook Web Access Security Issues	271
10.7	Secure Architectural Alternative	272
10.8	Tunneling and Bridging	274
10.9	Putting Components into Practice	274
10.10	Using Microsoft ISA Server with OWA	275
10.11	Using a Hardware-Based SSL/TLS Proxy Server with OWA	278
10.12	Back-End Encryption	279
10.13	Understanding OWA, Authentication, Front-End Servers, and Redirection	281
10.14	Implementing Outlook RPC over HTTP	288
10.15	Summary	299
A	Lists of Events Generated by the Active Directory Connector	301
B	Connection Agreement Attributes	353
C	Active Directory Connector Registry Keys	363
	Index	365

Editorial Reviews

"Clearly the topic of migration and deployment is in Kieran's sweet spot. The entire topic is like a fastball floating right down the middle for him because he absolutely hits a home run in this book. He doesn't just talk about what different components are involved with migration and deployment, he describes how everything works and why you might take different approaches in your deployment. It's right on the money!"— Donald Livengood,
Senior Solution Architect (MCSE, MVP, HP Certified Architect), Hewlett-Packard Company

"In his new book, Kieran outlines clear, concise, and crisp guidelines for migration and deployment of Exchange messaging systems. Armed with this generally hard to find knowledge, you'll be prepared for most Exchange 2003 implementation projects. His principles have been well used in the past-not least for the implementation of a 350,000 user Exchange system in my own organization." — Roy Beattie, Messaging and Integration Director, NI Schools C2k Project

"Kieran has been working with us since 1999, originally on the AstraZeneca merger work and more recently on our Exchange 2003 project. This book demonstrates Kieran’s expertise in deployment and migration and is particularly strong on Directory Synchronization, which is a fundamental component of a migration from Exchange 5.5 to 2003. You’ll get quite the level of detail that you need, presented in a format that is easily digestible in this work." — Dave Cook, Global Messaging Architect, Astra Zeneca Healthcare

From the Publisher