Planning Where to Install econtrol 3 for Active Directory & Exchange

Transcription

1 Planning Where to Install econtrol 3 for Active Directory & Exchange Understanding the econtrol Installer econtrol 3.6 installer now supports installing econtrol components on Windows 2003 or 2008 servers (standard, enterprise, and R2) in both 32-bit and 64-bit platforms. The installer is capable of installing all of the components required for econtrol: econtrol Web Server - this includes: creating a local econtrol service account and adds the account to the local 'Administrators' and 'IIS_WPG' (for IIS 6) or 'IIS_USRS' (for IIS 7) groups, installs and configures the econtrol website that includes the operators web console and the econtrol administrators backend console, and installs the econtrol Configure Connections utility. econtrol Remote Agent creating a local econtrol service account (if it does not exist) and adds the account to the local 'Administrators' group, installs the econtrol Omni Connection Service for Exchange and configures it to logon as the local econtrol service account, and installs the econtrol Configure Connections utility. econtrol Home Folder Server Support creating a local econtrol service account (if it does not exist) and adds the account to the local 'Administrators' group, and modifies the Windows registry to allow the server to use Windows Management Instrumentation (WMI) to manage user home folders. 1 / 6

2 Important Questions to Ask When planning for an econtrol deployment, there are many important factors to consider: Is there an Enterprise Certificate Authority in Place? econtrol needs to use secure LDAP authentication to the Active Directory domain controller. This requires that the domain controller is using Enterprise CA issued certificates, or valid 3rd party certificates. If Enterprise CA issued certificates are being used and the econtrol server is a member of the Active Directory domain, then secure LDAP authentication should automatically work. Refer to econtrol system requirements for detailed information. Is there more than one Active Directory domain to manage? If there are multiple domains, a unique Active Directory connection must be configured on the econtrol Host Server for each domain. Will econtrol create home folders when user accounts are created? Supporting user home folders requires installing Home Folder Server support on both the econtrol Host Server and the Home Folder Servers. In addition, the econtrol Host Server and the Home Folder Servers should be using the same Windows OS (Windows 2003 or Windows 2008). Contact Omni support if home folders are stored on multiple versions of Windows server. Will econtrol manage Exchange accounts? econtrol Remote Agent support will need to be installed and configured. Starting with econtrol 3.6.1, support is provided for those AD networks that hose multiple versions of Exchange (see the next question). In addition, the server that hosts an econtrol Remote Agent needs to be a member of the Active Directory domain that hosts one of the Exchange mailbox storage servers, and it needs to have the applicable version of Exchange Management Tools installed that match the corresponding version of Exchange. This effectively limits econtrol Remote Agent support installation to a Windows server platform with: Windows Server Exchange Management Tools econ Windows 2003 (x86) Exchange 2003 Management Tools 32-bit Exchan Windows 2003 (x86) Windows 2008 (x86) Exchange 2007 Management Tools 32-bit Exchan Windows 2003 (x64) Exchange 2007 Management Tools 64-bit Exchange 2 / 6

3 Windows Server Exchange Management Tools econ Windows 2008 (x64) Windows 2003 (x64) Windows 2008 (x64) Exchange 2010 Management Tools 64-bit Exchange Is the Exchange system a multiple version Exchange system? Some networks host multiple Exchange versions. It is common for large enterprise environments to host Exchange 2003, 2007 and 2010 mailbox storage servers as it takes time to transition user mailboxes to newer versions of Exchange and retire old servers. Using this as an example, the most cost effective strategy to support all three versions of Exchange, would be to: Install the econtrol Host Server, Exchange 2010 Management Tools, and the Exchange 2010 Remote Agent on a Windows bit server, and Install the Windows ADMINPAK (adds MMC AD snap-ins), the Exchange 2003 management Tools, and the Exchange 2007 Management Tools on a Windows bit server. As user mailboxes are moved from Exchange 2003/2007 to Exchange 2010 and old Exchange mailbox storage servers can be retired, the econtrol Exchange connections are modified to match the change in the environment. Eventually, after all the Exchange 2003 and 2007 mailbox storage servers are retired, this Remote Agent Server can also be retired. Well econtrol manage a mixed Network environment? If econtrol will also manage edirectory and GroupWise, and/or OpenLDAP networks, refer to the planning guidelines for edirectory or OpenLDAP systems Typical econtrol Scenarios econtrol managing Active Directory only 3 / 6

4 "Active Directory Domain" each domain that econtrol will manage must be configured "econtrol Host Server": econtrol managing Active Directory with Home Directories "Active Directory Domain" each domain that econtrol will manage must be configured "econtrol Host Server": Home Folder Server support is installed "Home Folder Server(s)" - econtrol Home Folder Server support must be installed on each Home Folder host server. econtrol managing Active Directory with Exchange "Active Directory Domain" each domain that econtrol will manage must be configured 4 / 6

5 "econtrol Host Server": "Remote Agent Server" - (one per Exchange system) can be the econtrol Host Server, an Exchange server, or another Windows server: Must have correct version of Exchange Management Tools installed Corresponding econtrol Remote Agent installed econtrol managing Active Directory with Home Folder Servers and Exchange "Active Directory Domain" each domain that econtrol will manage must be configured "econtrol Host Server": Home Folder Server support is installed "Home Folder Server(s)" - econtrol Home Folder Server support must be installed on each Home Folder host server. "Remote Agent Server" - (one per Exchange version) can be the econtrol Host Server, an Exchange server, or another Windows server: 5 / 6

6 Powered by TCPDF ( Must have correct version of Exchange Management Tools installed Corresponding econtrol Remote Agent installed Article ID: 192 Last updated: 16 Sep, 2013 Revision: 1 ServiceControl -> econtrol 3 - Operational Guides -> econtrol 3 for AD & Exchange -> Installation Guide -> Step 1 - Prepare for Installation -> Planning Where to Install econtrol 3 for Active Directory & Exchange 6 / 6