Exchange Server Cookbook Paul Robichaux, Missy Koslosky, and Devin t. Ganger CREILLT Beijing Cambridge Farnham Köln Paris Sebastopol Taipei Tokyo
Table of Contents Preface xi 1. Getting Started 1 Cooking with Exchange 1 Where to Get Tools 6 Finding More Information 7 2. Installation and Infrastructure 11 2.1 Verifying Your Current Infrastructure Is Ready for Exchange Server 2003 12 2.2 Preparing a Windows 2000 Server Computer for an Exchange Installation 17 2.3 Preparing a Windows Server 2003 Computer for an Exchange Installation 19 2.4 Preparing an Active Directory Forest for Exchange 21 2.5 Preparing an Active Directory Domain for Exchange 24 2.6 Verifying That Fotest and Domain Preparation Completed 26 2.7 Installing Exchange on a Member Server 28 2.8 Installing Exchange on a Domain Controller 30 2.9 Using Exchange Setup in Unattended Mode 32 2.10 Checking the Expiry Date of an Evaluation Version of Exchange 34 2.11 Upgrading the Evaluation Version of Exchange 35 2.12 Upgrading from Standard Edition to Enterprise Edition 36 2.13 Enumerating All Existing Exchange Servers 38 2.14 Enumerating All Exchange Connectors 40 2.15 Switching Exchange from Mixed Mode to Native Mode 41 2.16 Creating the First Administrative Group with a Custom Name 43 2.17 Viewing Administrative Groups in Exchange System Manager 44 V
2.18 Creating Administrative Groups 45 2.19 Removing Administrative Groups 46 2.20 Moving Objects Between Administrative Groups 47 3. Active Directory Entegration 49 3.1 Determining Which Domain Controllers Exchange Is Using 54 3.2 Forcing Exchange to Use Specific Domain Controllers 57 3.3 Determining and Specifying the DC That ESM Uses 61 3.4 Removing Exchange from Active Directory 64 3.5 Changing the Forest Functional Level 66 3.6 Controlling Exchange Settings Through Group Policy Objects 68 3.7 Installing Additional Recipient Update Service Instances 69 3.8 Troubleshooting DSAccess Topology Discovery 71 3.9 Checking Which Account or Group Has Been Assigned Permissions During ForestPrep 73 4. Exchange Server and Organization Management 75 4.1 Installing ESM on Windows XP 76 4.2 Starting and Stopping Exchange 79 4.3 Controlling Message Tracking Settings 82 4.4 Determining Whether a Server Is a Front-End Server 85 4.5 Applying Exchange System Policies 87 4.6 Monitoring Exchange Service Status 89 4.7 Controlling Diagnostic Logging 91 4.8 Measuring Exchange Performance 97 4.9 Delegating Administrative Control 101 4.10 Setting Default Send and Receive Size Limits 102 5. Recipient Management 105 5.1 Creating a User Account and Mailbox 107 5.2 Creating a Mailbox for an Existing User 110 5.3 Removing a Mailbox for an Existing User 113 5.4 Creating a Mail-Enabled Group 115 5.5 Controlling Mailbox Size Limits 117 5.6 Moving Mailboxes 119 5.7 Getting Mailbox Access and Logon Information 121 5.8 Determining the Size ofa Mailbox 123 5.9 Recovering a Deleted Mailbox 124 5.10 Bulk-Adding Mailboxes from an Excel Worksheet 127 vi Table of Contents
5.11 Creating a Mail-Enabled Contact 129 5.12 Creating Multiple Address Lists 131 5.13 Creating Query-Based Distribution Groups 134 5.14 Granting Füll Access to Mailboxes 137 5.15 Getting the List of Delegates for a Mailbox 138 5.16 Changing the Display Name Format in the GAL 140 5.17 Hiding or Revealing Items in Address Lists 142 5.18 Setting a Default Reply-to Address for a Mailbox 143 5.19 Creating Recipient Policies 145 5.20 Limiting Who Can Send Mail to a Distribution Group 148 5.21 Granting Send-as Permissions 151 5.22 Granting Send on Behalf of Permissions 152 5.23 Granting Users or Groups Permission to Access Other Mailboxes 153 5.24 Limiting the Number of Recipients to Which Messages Can Be Sent 155 5.25 Creating and Using Offline Address Lists 157 5.26 Using Mailbox Manager 159 5.27 Using ADModify.NET to Update User Attributes 162 5.28 Setting Properties on User Accounts 163 5.29 Retrieving Properties on User Accounts 166 Mailbox and Public Folder Database Management 169 6.1 Creating a Storage Group 174 6.2 Deleting a Storage Group 176 6.3 Enumerating the Storage Groups on a Server 177 6.4 Creating a Mailbox Database 178 6.5 Creating a Public Folder Database 180 6.6 Deleting a Database 182 6.7 Mounting a Database 184 6.8 Dismounting a Database 185 6.9 Moving Databases and Logs to Different Disks 186 6.10 Determining How Much Whitespace Is in a Database 189 6.11 Finding the Low Anchor Log File 191 6.12 Rebuilding a Database Fite from Logs 192 6.13 Enumerating Connected Mailboxes in a Database 193 6.14 Turning on Circular Logging for a Storage Group 195 6.1.5 Controlling the Online Maintenance Process 197 6.16 Performing an Offline Defragmentation 200 6.17 Shnnking a Database That Exceeds the 16 GB Size Limit for Standard Edition 201 Table of Contents vii
7. Transport, Routing, and SMTP 204 7.1 Creating a New SMTP Virtual Server 206 7.2 Choosing the Correct Connector 207 7.3 Creating a Routing Group Connector 210 7.4 Creating an SMTP Connector 211 7.5 Configuring a Connector to Allow Routing of Messages from Specific Senders 215 7.6 Allowing Large Messages Through Specific Connectors 216 7.7 Creating a Routing Group 217 7.8 Removing a Routing Group 221 7.9 Designating the Routing Group Master 223 7.10 Moving a Server Between Routing Croups 225 7.11 Examining Your Routing Structure 228 7.12 Listing the SMTP Queues on a Specific Virtual Server 229 7.13 Inspecting the Contents of a Queue 232 7.14 Deleting Messages from a Queue 235 7.15 Moving SMTP Queues to a New Location 237 7.16 Deleting Messages from the Badmail Folder 239 7.17 Sharing an SMTP Domain Between Exchange and a Foreign Mail System 241 7.18 Accepting Mail for Multiple Domains 244 7.19 Controlling Mail Relaying 245 7.20 Filtering Messages Based on Recipient 247 7.21 Setting IP Address Restrictions for Multiple Servers 248 7.22 Using a DNS Block List on Exchange Server 2003 250 7.23 Controlling Global and Internet Message Format Settings 251 7.24 Setting Up a Role Email Address 253 7.25 Verifying Your External DNS Configuration for Inbound SMTP 254 7.26 Testing SMTP Manually 259 8. Client Connectivity 262 8.1 Blocking Specific Versions of Outlook from Connecting 264 8.2 Configuring Attachment Blocking for Outlook 266 8.3 Fixing Mailbox Folder Names That Appear in the Wrong Language 273 8.4 Configuring Attachment Blocking for OWA 2003 274 8.5 Configuring Freedoc Access for OWA 2003 276 8.6 Controlling OWA 2003 Spellchecking 277 8.7 Enabling SSL for OWA 280 8.8 Configuring Form-Based Authentication for OWA 2003 282 viii Table of Contents
8.9 Allowing Password Changes Through OWA 283 8.10 Changing OWA 2003 Session Timeouts 285 8.11 Using the OWA Web Administration Tool 286 8.12 Creating OWA 2003 Themes 288 8.13 Forcing Users to Use a Specific OWA Theme 292 8.14 Enabling the Use of FBA/SSL with Outlook Mobile Access and Exchange ActiveSync 293 8.15 Enabling Support for "Unsupported" Outlook Mobile Access Devices 295 8.16 Adding Mobile Carriers for Exchange ActiveSync 296 8.17 Disabling Exchange ActiveSync Certificate Checking 297 8.18 Installing a Root Certificate for Use with EAS 298 8.19 Configuring the POP3 Server for User Access 300 8.20 Configuring the IMAP4 Server for User Access 302 8.21 Configuring NNTP for Newsgroup Feeds 304 8.22 Disabling User Access to POP3, IMAP4, and HTTP 308 8.23 Using Protocol Logging 310 8.24 Making Exchange Work Behind a Cisco PIX Firewall 315 9. Public Folder Management 317 9.1 Using the Public Folder Migration Tool 322 9.2 Rehoming Public Folders 324 9.3 Getting and Setting Public Folder Permissions 325 9.4 Forcing Public Folder Replication 331 9.5 Replicating the Public Folder Hierarchy 333 9.6 Getting Properties of the Public Folder Tree 335 9.7 Creating and Deleting Public Folders 336 9.8 Mail-Enabling or Mail-Disabling a Public Folder 338 9.9 Finding All Replicas of a Public Folder 340 9.10 Working with a Specific Server's Replica List 342 9.11 Controlling Who Can Create Top-Level Public Folders 345 9.12 Recreating the Schedule+Free/Busy Folder 346 9.13 Controlling Public Folder Replication Settings 349 9.14 Finding or Changing the Site Folder Server 350 10. Exchange Security 353 10.1 Scanning Exchange Servers for Security Patches 355 10.2 Securing SMTP Authentication 357 10.3 Enabling IPsec Between Front- and Back-End Servers 360 Table of Contents ix
10.4 Enabling IPsec on an Exchange Server 2003 Cluster 364 10.5 Enabling SSL Offloading 365 10.6 Setting Up S/MIME in Outlook 367 10.7 Creating a Custom DNS Block List 371 10.8 Controlling Anonymous Address Resolution 373 10.9 Disabling Unnecessary Exchange Services 375 10.10 Setting Up RPC over HTTPS 378 10.11 Setting Up TLS Security for SMTP 383 10.12 Changing Server Banners 385 11. Backup, Restore, and Recovery 389 11.1 Backing Up an Individual Mailbox 394 11.2 Backing Up a Database 396 11.3 Backing Up a Storage Group 398 11.4 Restoring One or More Databases to the Same Server 399 11.5 Restoring a Storage Group to the Same Server 401 11.6 Restoring a Database to a Different Machine in Exchange 2000 403 11.7 Restoring a Database to a Different Machine in Exchange Server 2003 405 11.8 Recovering an Individual Mailbox from a Database Backup 406 11.9 Performing Disaster Recovery of a Cluster Node to a Nonclustered Server 408 11.10 Using the Exchange Server 2003 Mailbox Recovery Center to Recover a Mailbox 410 11.11 Recovering to a Recovery Storage Group in Exchange Server 2003 413 11.12 Performing Dial-Tone Recovery with Exchange Server 2003 415 11.13 Using the Mailbox Reconnect Utility 418 Index 421 x Table of Contents