Contents Overview 1 Overview of the Administrative Utilities 2 Introduction to Exchange System Manager 4 Managing Administrative Security 9 Lab A: Creating a Mail-enabled User Account 21 Creating and Configuring Administrative Groups 27 Lab B: Setting Security on Administrative Groups 33 Using Exchange 2000 System Policies 39 Administering Exchange 2000 Address Lists 43 Lab C: Managing an Address List in Exchange 2000 53 Review 59 Module 3: Administering Microsoft Exchange 2000 BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY Information in this document is subject to change without notice. The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted. Complying with all applicable copyright laws is the responsibility of the user. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Microsoft Corporation. If, however, your only means of access is electronic, permission to print one copy is hereby granted. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.  2000 Microsoft Corporation. All rights reserved. Microsoft, Active Directory, BackOffice, Jscript, NetMeeting, Outlook, Windows, and Windows NT are either registered trademarks or trademarks of Microsoft Corporation in the U.S.A. and/or other countries. Other product and company names mentioned herein may be the trademarks of their respective owners. Program Manager: Steve Thues Product Manager: Megan Camp Instructional Designers: Bill Higgins (Volt Technical), Jennifer Morrison, Priya Santhanam (NIIT (USA) Inc), Samantha Smith, Alan Smithee Instructional Software Design Engineers: Scott Serna Subject Matter Experts: Krista Anders, Megan Camp, Chris Gould (Global Logic Ltd), Janice Howd, Elizabeth Molony, Steve Schwartz (Implement.Com), Bill Wade (Wadeware LLC) Technical Contributors: Karim Batthish, Paul Bowden, Kevin Kaufman, Barry Steinglass, Jeff Wilkes Graphic Artist: Kimberly Jackson (Independent Contractor) Editing Manager: Lynette Skinner Editor: Kelly Baker Production Manager: Miracle Davis Build Manager: Julie Challenger Production Support: Marlene Lambert (Online Training Solutions, Inc) Test Manager: Eric Myers Courseware Testing: Robertson Lee (Volt) Creative Director, Media/Sim Services: David Mahlmann Web Development Lead: Lisa Pease CD Build Specialist: Julie Challenger Localization Manager: Rick Terek Operations Coordinator: John Williams Manufacturing Support: Laura King; Kathy Hershey Lead Product Manager, Release Management: Bo Galford Lead Product Manager, Messaging: Dave Phillips Group Manager, Courseware Infrastructure: David Bramble Group Product Manager, Content Development: Dean Murray General Manager: Robert Stewart Module 3: Administering Microsoft Exchange 2000 iii BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY Instructor Notes This module provides students with the information necessary to assign administrative roles to users and groups, grant and delegate permissions to administrators, use administrative groups to manage administrative permissions, and create system policies to manage Microsoft ® Exchange 2000 objects. After completing this module, students will be able to: ! Describe the utilities that you can use to modify the Active Directory™ directory service. ! Describe the main components of Exchange System Manager that are used to administer Exchange 2000. ! Manage administrative security by granting permissions, overriding inherited permissions, and delegating permissions. ! Create administrative groups and configure administrative groups to secure an Exchange organization. ! Create and apply system policies and secure system policy creation. ! Create, configure, and update address lists in Exchange 2000. Materials and Preparation This section provides the materials and preparation tasks that you need to teach this module. Required Materials To teach this module, you need the following materials: ! Microsoft PowerPoint ® file 1572A_03.ppt Preparation Tasks To prepare for this module, you should: ! Read all the materials for this module. ! Complete the labs. Presentation: 75 Minutes Lab: 55 Minutes iv Module 3: Administering Microsoft Exchange 2000 BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY Module Strategy Use the following strategy to present this module: ! Introduction to the Administrative Utilities In this topic, describe the four utilities that you can use to grant permissions, assign roles, and create system policies. Inform the students that Exchange System Manager is the utility used for most administration tasks. ! Introduction to Exchange System Manager In this topic, explain the properties of the Organization object in Exchange System Manager. Also, list and explain the top-level containers located under the Organization object in Exchange System Manager. ! Managing Administrative Security In this topic, explain how to grant permissions to administrators to enable them to carry out their tasks. Explain how to do this manually as well as by using the Exchange System Manager. Also explain how to delegate permissions using the Exchange Administration Delegation Wizard. ! Creating and Configuring Administrative Groups In this topic, explain how to create a new administrative group. Next, explain how to grant permissions to an administrative group manually or by using the Exchange Administration Delegation Wizard. ! Using Exchange 2000 System Policies In this topic, explain how to manage Exchange 2000 objects using system policies. List the objects for which you can create system policies. Explain how to create policies and apply them to an Exchange organization. ! Administering Exchange 2000 Address Lists In this topic, describe the various address lists available in Exchange 2000. Explain how to create custom address lists and offline address lists. Explain how address lists can be configured to meet different requirements. Finally, explain how to keep address lists up-to-date by using the Recipient Update Service. Module 3: Administering Microsoft Exchange 2000 v BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY Customization Information This section identifies the lab setup requirements for a module and the configuration changes that occur on student computers during the labs. This information is provided to assist you in replicating or customizing Microsoft Official Curriculum (MOC) courseware. The labs in this module are also dependent on the classroom configuration that is specified in the Customization Information section at the end of the Classroom Setup Guide for course 1572A, Implementing and Managing Microsoft Exchange 2000. Lab Setup The following list describes the setup requirements for the labs in this module. Setup Requirement 1 The labs in this module require Exchange 2000. To prepare student computers to meet this requirement, perform one of the following actions: ! Complete the labs for Module 2, “Installing Microsoft Exchange 2000,” in course 1572A, Implementing and Managing Microsoft Exchange 2000. ! Install Exchange 2000 at D:\Program Files\Exchsrvr on each server into an organization named Northwind Traders. Components installed are Microsoft Exchange Messaging and Collaboration Services, Microsoft Exchange System Management Tools, and Microsoft Exchange Instant Messaging Service. Setup Requirement 2 The labs in this module require a custom MMC. To prepare student computers to meet this requirement, perform one of the following actions: ! Complete the labs for Module 2, “Installing Microsoft Exchange 2000,” in course 1572A, Implementing and Managing Microsoft Exchange 2000. ! Have the students create a custom MMC in the C:\Documents and Settings\All Users\Desktop that is saved as your_firstname Console. The MMC contains the Active Directory Users and Computers snap-in and the Exchange System snap-in. Important vi Module 3: Administering Microsoft Exchange 2000 BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY Lab Results Performing the labs in this module introduces the following configuration changes: ! An organizational unit is created in Active Directory that is named your_servernameOU for each server in the classroom. ! A user account is created in each server’s organizational unit for each student. The account is a member of the Domain Admins group and has a mailbox on the student’s Exchange server. ! An Outlook profile is created for each student on their own server that opens their mailbox. ! The Domain Admins group is delegated Full Administrator role on the Northwind Traders organization. ! An address list is created that shows users with the city attribute set to the student’s server name. Module 3: Administering Microsoft Exchange 2000 1 BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY Overview ! Overview of the Administrative Utilities ! Introduction to Exchange System Manager ! Managing Administrative Security ! Creating and Configuring Administrative Groups ! Using Exchange 2000 System Policies ! Administering Exchange 2000 Address Lists Administering a large Microsoft ® Exchange 2000 organization is more than a one-person task. In this module, you will learn how to grant permissions, assign roles, and apply system policies so that specific administrative tasks can be safely delegated to other administrators. After completing this module, you will be able to: ! Describe the utilities that you can use to modify the Active Directory™ directory service. ! Describe the main components of Exchange System Manager that are used to administer Exchange 2000. ! Manage administrative security by granting permissions, overriding inherited permissions, and delegating permissions. ! Create administrative groups and configure administrative groups to secure an Exchange organization. ! Create and apply system policies and secure system policy creation. ! Create, configure, and update address lists in Exchange 2000. Topic Objective To provide an overview of the module topics and objectives. Lead-in In this module, you will learn how to administer Exchange 2000. 2 Module 3: Administering Microsoft Exchange 2000 BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY Overview of the Administrative Utilities Administrative Utilities Administrative Utilities Active Directory Schema Active Directory Schema Exchange System Manager Exchange System Manager Ldp.exe Ldp.exe Adsiedit.exe Adsiedit.exe Exchange 2000 security builds on Windows 2000 security. Therefore, administering Exchange 2000 involves making changes to the Active Directory ™ directory service. For example, you can grant permissions, assign roles, and create system policies. There are several utilities available that you can use to make changes to Active Directory. Exchange System Manager Exchange System Manager is a Microsoft Management Console (MMC) snap- in that you can use to: ! Provide a framework for containing all other Exchange snap-ins so that you can manage an entire Exchange enterprise from a single console. ! Provide a consistent administrative experience for administrators who deal with all facets of Exchange, including public folders, servers, routing, and policies. ADSI Edit ADSI Edit (Adsiedit.exe) is a low-level Active Directory editor that uses Active Directory Services Interface (ADSI) to view and modify objects in the Active Directory, including the attributes and properties of a specific user or group. You need to use ADSI Edit to perform administrative tasks that cannot be performed using Exchange System Manager or Active Directory Users and Computers. For example, ADSI Edit enables you to specify how the full name attribute is generated; this cannot be specified using Exchange System Manager or Active Directory Users and Computers. ADSI Edit is included with the Microsoft Windows ® 2000 support tools. Topic Objective To list and describe the utilities that you can use to modify Active Directory. Lead-in You can choose from four utilities for administering Exchange 2000. Module 3: Administering Microsoft Exchange 2000 3 BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY Active Directory Administration Tool You can use the Active Directory Administration Tool (ldp.exe), a generic Lightweight Directory Access Protocol (LDAP) tool, to connect to an LDAP compatible directory. The Active Directory Administration Tool is similar to ADSI Edit in that it allows you to view and modify objects in Active Directory. The Active Directory Administration Tool is also useful for viewing replication information of objects, such as when the object was last replicated. The Active Directory Administration Tool is included in the Windows 2000 Server support tools. Active Directory Schema Active Directory Schema is an MMC snap-in that allows you to view attribute and class configuration. This is different from ADSI Edit and Active Directory Administration Tool in that you cannot view instances of an object, such as a specific user. Before loading Active Directory Schema, you must register its dynamic- link library (DLL) by typing Regsvr32 schmmgmt.dll at the command prompt, and then pressing ENTER. Note 4 Module 3: Administering Microsoft Exchange 2000 BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY # ## # Introduction to Exchange System Manager ! Exchange System Manager ! Organization Object Properties ! Top-Level Containers As an administrator, you need to configure, maintain, and secure your Exchange organization. Exchange System Manager provides all of the configuration options you need in one convenient MMC snap-in. Because you will primarily use Exchange System Manager to administer the Exchange 2000 organization, this utility is the focus in this module. Topic Objective To introduce this Exchange System Manager. Lead-in You can perform most tasks for administering an Exchange organization using Exchange System Manager. [...]... is mail/mailbox-enabled BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY 20 Module 3: Administering Microsoft Exchange 2000 (continued) Tasks Exchange 2000 permissions Windows 2000 group memberships Move mailboxes from Exchange Server 5.5 to Exchange 2000 in the same site/administrative group In Exchange Server 5.5, you should be an Exchange Administrator for the Site naming... Computers Exchange 2000 only recognizes the Receive As extended permission granted on Exchange 2000 objects BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY 12 Module 3: Administering Microsoft Exchange 2000 Permission Inheritance Topic Objective To identify how permissions are inherited in Exchange 2000 Organization Lead-in Inheritance of permissions simplifies administration in Exchange. .. ONLY Module 3: Administering Microsoft Exchange 2000 Tasks 4 25 Detailed Steps Log on to the domain as your_username a Press CTRL+ALT+DELETE b In the User name box, type your_username c In the Password box, type password and then click OK BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY 26 Module 3: Administering Microsoft Exchange 2000 Exercise 3 Creating a Profile in Outlook 2000. . .Module 3: Administering Microsoft Exchange 2000 5 Exchange System Manager Topic Objective To explain how to start Exchange System Manager Lead-in Exchange System Manager displays data from Active Directory in the Windows 2000 domain Exchange Exchange System System Manager Manager Administrator Active Active Directory Directory Domain Controller You start Exchange System Manager... above the organization container for the Exchange 2000 organization You can configure the permissions on the Microsoft Exchange container within the Active Directory schema using ADSI Edit CN=Configuration…, CN=Services, CN =Microsoft Exchange BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY 16 Module 3: Administering Microsoft Exchange 2000 Full Administrator Role The following... that they propagate down the Exchange object console tree BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY 10 Module 3: Administering Microsoft Exchange 2000 Types of Permissions Topic Objective Standard Standard Permissions Permissions To identify the types of permissions in Exchange 2000 ! Lead-in ! There are two types of permissions in Exchange 2000 standard and extended !... organization level BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY 18 Module 3: Administering Microsoft Exchange 2000 Note When you use Exchange Delegation Administration Wizard, the Send As and Receive As permissions are not granted by default Therefore, it is recommended that users be delegated permissions to administer Exchange 2000 using the Exchange Delegation Administration... MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY 14 Module 3: Administering Microsoft Exchange 2000 Delegating Permissions to Administrators Topic Objective To list and describe the three roles that can be applied to a user or a group Permissions Permissions Lead-in You can delegate permissions on Exchange 2000 objects manually, or by using Exchange Administration Delegation Wizard Exchange. .. in Outlook 2000 Prerequisites Before working on this lab, you must have: ! Knowledge of Windows 2000 ! Knowledge of Microsoft Outlook 2000 Lab Setup To complete this lab, you need: ! To have Microsoft Exchange 2000 installed at D:\Program Files\Exchsrvr into an organization named Northwind Traders Components installed are Microsoft Exchange Messaging and Collaboration Services, Microsoft Exchange System... registry value: HKEY_CURRENT_USER\Software \Microsoft\ Exchange\ EXAdmin\ShowSec urityPage=dword:00000001 (enable) or 0 (disable) BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY 8 Module 3: Administering Microsoft Exchange 2000 Top-Level Containers Topic Objective Organization To list and describe the toplevel containers in an Exchange 2000 organization Global Settings Recipients . Exchange 2000 System Policies 39 Administering Exchange 2000 Address Lists 43 Lab C: Managing an Address List in Exchange 2000 53 Review 59 Module 3: Administering. choose from four utilities for administering Exchange 2000. Module 3: Administering Microsoft Exchange 2000 3 BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER