30323 99 pp. 539-570 r1ah.ps 2/19/04 11:15 AM Page 539 Index 4GT tuning switch (13GB), 146, 334–335 Active/Passive cluster model compared with Active/Active, 349–350 A defined, 336 A (Host) records, 356 ActiveSync. See Exchange ActiveSync Accept/Deny lists, 309–312, 320 ActiveX, S/MIME control, 286–287 Access control lists (ACLs), 295 ADC (Active Directory Connector), 29–31 Access control, information privacy, 294–295 components, 154–155 Access properties, SMTP virtual servers, connection agreements, 31 231–232 installing, 165 Accessibility requirements, e-mail systems, 6 name resolution and, 30–31 ACLs (access control lists), 295 overview, 29–30 Active Directory. See also Registry schema changes and, 86–87 compatibility issues, 63–64 service account restrictions, 30 domain functional levels, 63–64 setup permissions, 31 DOMAINPREP and, 29 ADC management snap-in, 165–166 DSAccess (Directory Service Access), ADC servers, upgrading, 184 475–476 ADC Tools Exchange 2000 integration with, 8–9 automating connection agreements, 166–167 Exchange 2003 deployment and, 26–27 launching, 165–166 forest functional levels, 64 log files, 156–157, 173 FORESTPREP and, 27–29 running, 155–156 InetOrgPerson object, 65 ADCObjectCheck, 133 LDAP and, 288–290 ADCUserCheck, 133 linked value replication, 64 AdditionalPoolThreadsPerProc, 474 preparing for Exchange Server 2003, 154 Address Rewrite (EXARCFG), 498–499 RSG integration with, 399–404 ADDROOTCERT.EXE (Add Root Certificate), Active Directory Account Cleanup 497–498 Wizard, 17 ADMIN.EXE (Exchange Server 5.5 Active Directory Connector. See ADC Administrator), 16 (Active Directory Connector) Administration. See also ESM (Exchange System Active Directory Services Interface (ADSI), Manager); QDGs (query-based distribution 111 groups) Active/Active cluster model components, 15–16 compared with Active/Passive, 349–350 improvements to, 92–93 defined, 336 productivity enhancements, 195–196 limitations of, 353 Administrative Groups containers, ESM, 211–212 539 30323 99 pp. 539-570 r1ah.ps 2/19/04 11:15 AM Page 540 540 Index Administrators Automatic Error Reporting, 328 elevation of privilege attacks and, 297 AVAPI (antivirus API), 19 Exchange 2000 permissions and, 340 ADSI (Active Directory Services Interface), B 111 Back-end servers, 100. See also Front-End/Back- ADSI Edit, 399, 477 End topology ADUserScan, 133 Backfill Request/Response messages, 495–496 Advanced Queuing Engine (AQE), SMTP, 49 Backup and Recovery, 34–38. See also RSGs Advanced Research Projects Agency Network (recovery storage groups) (ARPANET), 3–5 Brick-level backups, 376 AirMAPI, 72, 410, 488–489 deciding what to back up, 38 Algorithms, 285. See also Encryption features, 21–22 Alias matching, Outlook, 487–488 Offline backups, 377 Always-Up-To-Date (AUTD), 79, 464 overview, 375–377 Antivirus API (AVAPI), 19 recovery options, 21–22 Antivirus software, 38–42 recovery servers, 382 history of viruses, 38–39 software types supported, 34–35 Knowledge Base and, 42 third-party software, 36–37 MAPI-based scanning, 40 VSS (Volume Shadow Copy Service), 377–382 multiple level approach to, 39 Windows Backup Utility, 35–36, 376 third-party options, 41–42 Backup Utility, Windows, 35–36, 376 VSAPI-based, 40–41, 323 Backward compatibility, ESM, 202–203 Application event logs, 516 Bad item skip, 71, 218–219 AQE (Advanced Queuing Engine), SMTP, 49 Base distinguished Name (DN), 255 Archive Sink tool, 498–499 Basic authentication, 436 ARPANET (Advanced Research Projects Agency BBN. See Bolt, Beranek, and Newman Network), 3–5 Beaconing ASP.NET blocking, 456–457 device emulators supported by, 537–538 overview, 420–421 Device Update 2.0, 48 preventing disclosure of information, 421–422 mobile devices supported by, 527–535 Berkeley Internet Name Domain (BIND), 33 OMA and, 458 BIND (Berkeley Internet Name Domain), 33 Attachments Block list services, 300–301. See also RBLs blocking, 456, 481–483 (Realtime Block Lists) malicious, 423 Blocked Senders list, 424 Attackability, 260 Blogs, 522–523 AUTD (Always-Up-To-Date), 79, 464 Bolt, Beranek, and Newman (BBN) AUTD Troubleshooting tool, 506–507 ARPANET developed by, 3–5 Authentication. See also FBA (Forms Based impact on business messaging, 2–3 Authentication); Kerberos BOOT.INI, Windows start-up switches, 335 Basic authentication, 436 Borders servers, Connection Filtering, NTLM, 30–31, 265, 343 312–314 Outlook 2003, 417–418 Brick-level backups, 376 RPC over HTTPS, 439 Bridgehead servers AUTHREST.EXE (Authoritative Restore), IMW and, 190 499–500 sizing, 54 30323 99 pp. 539-570 r1ah.ps 2/19/04 11:15 AM Page 541 Index 541 Buffer Packing, 71, 488–489 CERTCHK.EXE (Disable Certificate Business integrity, 94 Verification), 500 Business messaging, early history, 2–7 Certificates ARPANET, 3–5 installing, 280–281 BBN and, 2–3 requesting, 275–280 development of e-mail clients, 5 x.509 and, 274 development of network e-mail, 4 Certification authorities. See CAs (certification mail box protocol developed, 5 authorities) mail transfer protocol developed, 5 CERTREQ.TXT, 280 requirements e-mail systems must fulfill, 6–7 Change numbers (CN), 495 role of e-mail communication in business, 5–6 Chat services, 124–125 /ChooseDC, setup switch, 85 C Clients CA (Computer Associates), 37 MAPI, 69–73 Cached Exchange Mode, Outlook, 411–414 mobile, 76–80, 465 caching public folder favorites in, 414 OMA, 460 enabling/disabling, 412–414 Web-based, 73–76 MAPI clients, 71 Clients, Exchange. See also Outlook 2003 overview, 411–412 categories of, 69 as productivity feature, 107 evolution of, 409 Calendars Performance counters, 428–430 Exchange Calendar, 15 CLUADMIN.EXE, 340–341 OWA, 448–449 Cluster Administrator, 336 CALs, 8, 10–11 Cluster registry, 336, 337 Capacity planning, 55–56 Cluster Virtual Server, 358 Capacity Planning and Topology Calculator CLUSTER.EXE, 344 (CPTC), 55 Clustering CAs (certification authorities) Active/Active vs. Active/Passive models, ADDROOTCERT.EXE (Add Root 349–350 Certificate), 497–498 best practices, 358–360 overview, 125 defined, 336 selecting, 274 EVSs (Exchange Virtual Servers), 347–348, third-party, 280 368–370 CAT.DLL, 49 Exchange 2000, 474 CCMARCH.EXE (Importer for Lotus cc:Mail Front-End/Back-End topology and, 100, Archives), 502 342–343 CDO (Collaboration Data Objects), 111–113 general requirements, 358–360 CDOEX (CDO for Exchange Server), 21, 112 hardware requirements, 354–355 CDOEXM (CDO for Exchange Management), hot spare support, 346 112 improvements to, 101–102 CDOHTML (CDO Rendering Library), 128 IP Address resources and, 363–364 CDOSYS (transport event sink), 111–112 migrating from Exchange 5.5 clusters, 372–373 CDOWF (CDO for Exchange Workflow), 113 MSDTC and, 353 CDOWFEVT.DLL (CDO Workflow Event network name resources and, 343–345, Sink), 353 364–365 CER (Corporate Error Reporting), 103 NTFS Volume Mount Points and, 345–346 30323 99 pp. 539-570 r1ah.ps 2/19/04 11:15 AM Page 542 542 Index Clustering (cont.) Components operating system requirements, 352–353 administration, 15–16 overview, 335 events, 14 permissions model for Exchange 2000, Exchange Connectors, 14–15 340–341 Exchange Management, 14 permissions model for Exchange 2003, information store, 13 341–342 Message Transfer Agent, 12–13 Physical Disk resources and, 360–362 mobility and client access, 16–17 security improvements, 340–346 Site Replication Service, 13–14 setup, 350–351 System Attendant, 12 support features, 22 turning off unnecessary, 144–145 System Attendant (MAD.EXE) and, 365–368 wizards and maintenance tools, 17–18 terminology, 335–339 Compression topology requirements, 355–358 MAPI, 72, 410, 488–489 upgrading Exchange 2000 clusters, 371–372 OWA, 440–441 CMC (Common Message Calls), 128 setting level of, 229 CN (change numbers), 495 Computer Associates (CA), 37 CNSet, 495 ConfigDSInteg, 134 Collaboration Data Objects. See CDO Configuration Summary screen, Internet Mail (Collaboration Data Objects) Wizard, 192 Colors, OWA user interface, 443–445 Connection Agreement Wizard, 170–173 COMCLUST.EXE, 353 Connection Agreement Selection screen, 172 Command-line launching, 156 DCDiag (Domain Controller Diagnostics), Site Connections screen, 171 152–153 Staging Area screen, 171 deployment tools, 132–138 Connection agreements Error Code Lookup, 501 ADC (Active Directory Connector), 31 MTACHECK.EXE (MTA Check), 505–506 configuring manually, 166 switches for Address Rewrite tool, 499 replication of, 178–180 switches for DNS Resolver, 501 Connection Filtering, 300–314 Common Message Calls (CMC), 128 configuring, 301–305 Communication. See also Business messaging, enabling on SMTP virtual servers, 312–314 early history exceptions, 306–309 encrypting, 269, 342–343 global accept/deny lists, 309–312 role of e-mail communication in business, overview, 300–301 5–6 RBL services and, 305–306 SD3+ Communications, 96–97, 260 Connection states, Outlook 2003, 412 securing server/client communications with Connection Status, Outlook 2003, 416–417 SSL, 260 Connector Servers, sizing, 54 CommVault Systems, backup software, 37 Connectors, legacy, 128 Compatibility Content expiration, OWA, 479 Active Directory, 63–64 Context menus, OWA, 446 backward compatibility of ESM, 202–203 Control messages, ActiveSync, 464 HCL (Hardware Compatibility List), 52, 54, Control Panel, 412–414 354 Cookie timeouts, OWA, 484 operating system, 62–63, 65–66 Copy backups, 381 30323 99 pp. 539-570 r1ah.ps 2/19/04 11:15 AM Page 543 Index 543 Corporate Error Reporting (CER), 103 ExDeploy, tasks, 140–142 Counters. See Performance counters overview, 83–84 CPTC (Capacity Planning and Topology permissions,