tag:blogger.com,1999:blog-55071586079245626092008-05-07T22:27:51.614+01:00Exchange2007.comDan Germainhttp://www.blogger.com/profile/14258985817109954427noreply@blogger.comBlogger27125tag:blogger.com,1999:blog-5507158607924562609.post-46568010185517287102008-05-06T11:12:00.003+01:002008-05-06T11:17:03.973+01:00Now you can all get Xobni for your inboxWell done to the team at Xobni - after 7 months of invite-only beta testing, it's <a href="http://www.nytimes.com/2008/05/05/technology/05xobni.html?_r=1&oref=slogin">now available</a> for publicly for anyone to download.<br /><br />You can get it here <a href="http://www.xobni.com/?friend=72198">http://www.xobni.com/?friend=72198</a><br />Have a look at the video on their site if you still need convincing... it's good stuff.Dan Germainhttp://www.blogger.com/profile/14258985817109954427noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-84754990634035860742008-05-01T15:45:00.019+01:002008-05-01T16:48:21.330+01:00Mail enabled Contacts in a Hosted Enviroment and the Offline Address Book.<div><div><div><div><div><a href="http://bp0.blogger.com/__xtL37U3R8s/R9knJ4H-5HI/AAAAAAAAABw/izD0rdzhT9c/s1600-h/me.jpg"><img id="BLOGGER_PHOTO_ID_5177212297277269106" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp0.blogger.com/__xtL37U3R8s/R9knJ4H-5HI/AAAAAAAAABw/izD0rdzhT9c/s320/me.jpg" border="0" /></a><br /><br /><br /></div><br /><br /><br /><div><br /><br /><span style="font-family:verdana;">Contacts in a Hosted Exchange environment can be tricky to implement succesfully, with 1) the way Exchange searches object attributes to create an Offline Address Book and 2) Active Directory not allowing 2 objects to have the same proxy address (which in all fairness is actually a great necessary check in the GUI to have – although this can be bypassed with LDAP manipulation! (ADSI too) – Note: having two objects with an identical proxyaddress will break delivery to that address and is considered attribute corruption of Active Directory).<br /><br />So how does the Exchange 2003 System Attendant (using oabgen.dll) determine objects to be included for OAB generation? - It looks to see if the object has two attributes: a ‘proxyaddress’ and ‘mail’ attribute. It will further check to ensure the primary (SMTP in uppercase) ‘proxyaddress’ matches the mail attribute address.<br /><br />So how does an Exchange Hoster get around 2 companies having the same contact of </span><a href="mailto:john@doe.com"><span style="font-family:verdana;">john@doe.com</span></a><span style="font-family:verdana;"> for example?<br /><br />First let me explain the TargetAddress and ProxyAddress attributes on a mail enabled AD contact.<br /><br />The TargetAddress is their actual email address, for example : </span><a href="mailto:bill@microsoft.com"><span style="font-family:verdana;">bill@microsoft.com</span></a><span style="font-family:verdana;"><br />The ProxyAddress is what RUS (if you use it – HMC disables all but Enterprise RUS (enabled for System Attendant operation)) stamps on the objects email addresses tab. RUS can of course be told to bypass objects by unchecking ‘Automatically update email addresses based on recipient policy’. You will find the primary proxyaddress will be the address of the contact, matching the targetaddress, and depending on RUS and Recipient Policy configuration it could well be stamped with further proxyaddresses.<br /><br />So, </span><a href="mailto:john@doe.com"><span style="font-family:verdana;">john@doe.com</span></a><span style="font-family:verdana;"> – how can two customers have this contact in an HMC/Hosted Exchange environment?<br /><br />The short answer is they can, but it cannot show up in the OAL. This is due to the Offline Address Book generation specifying proxyaddress attributes I mentioned earlier, rather than also considering targetaddress attributes.<br /><br />99% of hosters won’t have this problem – and contacts will be generated with a proxy address (something HMC supports by default). However when you run into this problem it does cause customer grief.<br /><br />One way of bypassing it is to give a bogus proxyaddress, for instance ‘HostedCompanyName.joe@bloggs.com’, where HostedCompanyName is the name of the Hosted Exchange customer.<br /><br />This does work, but introduces other issues when a user outside the Org performs a ‘Reply All’. Take a look.<br /><br />Here’s the properties of the contact from the GAL:<br /><br /><br /><a href="http://bp3.blogger.com/__xtL37U3R8s/SBnYnX2LiRI/AAAAAAAAADQ/E725EjnLDJw/s1600-h/1.JPG"><img id="BLOGGER_PHOTO_ID_5195421816076339474" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp3.blogger.com/__xtL37U3R8s/SBnYnX2LiRI/AAAAAAAAADQ/E725EjnLDJw/s320/1.JPG" border="0" /></a><br /></span></div><br /><br /><br /><div><br /></div><br /><br /><br /><div><span style="font-family:verdana;"></span></div><br /><br /><br /><div><br /> </div><div><a href="http://bp1.blogger.com/__xtL37U3R8s/SBnY632LiTI/AAAAAAAAADg/GCXKsIe2RjY/s1600-h/2.JPG"><img id="BLOGGER_PHOTO_ID_5195422151083788594" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp1.blogger.com/__xtL37U3R8s/SBnY632LiTI/AAAAAAAAADg/GCXKsIe2RjY/s320/2.JPG" border="0" /></a><br /></div><br /><br /><br /><div><span style="font-family:verdana;"></span></div><br /><br /><br /><div><br /></div><br /><br /><br /><div><span style="font-family:verdana;"></span></div><br /><br /><span style="font-family:verdana;"><div><br />Here’s the contact from the AD, I have pulled the info from ADSIEdit:<br /><br />You can see the highlighted proxyaddress and targetaddress attributes clearly:</div><div><br /><a href="http://bp0.blogger.com/__xtL37U3R8s/SBnZOn2LiVI/AAAAAAAAADw/-m1EY4mvQ-0/s1600-h/4.JPG"><img id="BLOGGER_PHOTO_ID_5195422490386205010" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp0.blogger.com/__xtL37U3R8s/SBnZOn2LiVI/AAAAAAAAADw/-m1EY4mvQ-0/s320/4.JPG" border="0" /></a><br /></div></div><div> </div><div> </div><div> </div><div> </div><div> </div><div> </div><div> </div><div> </div><div> </div><div> </div><div> </div><div> </div><div> </div><div> </div><div> </div><div> </div><div> </div><div> </div><div> </div><div><br /><br /><br><br /><br><br /><br><br /><br><br /><br><br /><br><br /><br><br /><br />When you send a message outside of the Org, and include the contact, if anyone that is also outside the Org does a 'Reply All', they will only see the incorrect proxyaddress and not the correct SMTP address of the contact, which is the targetaddress: </div><div><br /></div><div><br /><a href="http://bp1.blogger.com/__xtL37U3R8s/SBnZC32LiUI/AAAAAAAAADo/nBM71eZ2EME/s1600-h/3.JPG"><img id="BLOGGER_PHOTO_ID_5195422288522742082" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp1.blogger.com/__xtL37U3R8s/SBnZC32LiUI/AAAAAAAAADo/nBM71eZ2EME/s320/3.JPG" border="0" /></a><br /></div><div><br /></div><div></div><div><br /></div><div></div><div><br /></div><div></div><div><br /></div><div></div><div><br /></div><div></div><div><br /></div><div></div><div><br /></div><div></div><div><br /></div><div></div><div><br /></div><div></div><div><br /></div><div></div><div><br /></div><div></div><div><br /></div><div></div><div><br /></div><div></div><div><br /></div><div></div><div><br /></div><div></div><div><br /></div><div></div></span></div><div><span style="font-family:verdana;">This of course will result in an NDR <div><br /></div><div><br />The fix? Remove the proxy attribute altogether, removing the contact from OAB generation, or have the primary proxy address match the target address (standard Exchange2003/2007 behaviour) – but something that will cause mail flow issues when you get a customer with the same contact.<br /><br /><br />Oliver Moazzezi<br /><br />MVP - Exchange Server<br /></span><a href="http://bp1.blogger.com/__xtL37U3R8s/R9aek4H-47I/AAAAAAAAAAM/KRJZED4DTd4/s1600-h/MVPLogo.gif"></a><br /><a href="http://bp1.blogger.com/__xtL37U3R8s/R9kOmIH-5EI/AAAAAAAAABU/1pxHjT7-VGA/s1600-h/MVPLogo.gif"><span style="font-family:verdana;"><img id="BLOGGER_PHOTO_ID_5177185294817879106" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp1.blogger.com/__xtL37U3R8s/R9kOmIH-5EI/AAAAAAAAABU/1pxHjT7-VGA/s320/MVPLogo.gif" border="0" /></span></a><span style="font-family:verdana;"> </span></div></div></div></div>Oliver Moazzezihttp://www.blogger.com/profile/06204760006275603297noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-50653101983877584632008-04-29T06:19:00.003+01:002008-04-29T07:02:09.955+01:00SharePoint as an application platform!I've previously talked about the potential of Exchange and CRM as application development platforms and how the support of a provisioning platform opens these up for ISV application development.<br /><br />What I haven't mentioned is the powerful and unifying platform of SharePoint;<br /><ul><li>Sharepoint use a Windows platform running SQL Server and IIS6.</li><li>SharePoint is a .NET application and provides a powerful platform for building .NET applications & solutions </li><li>SharePoint is widely deployed and adopted by information workers providing a familiar interface</li><li>Close integration with Microsoft Office applications</li></ul>These are a number of features that Sharepoint does pretty well now, these being;<br /><ul><li>SharePoint & WSS are pretty well known for their collaboration features - document libraries are probably the most widely used feature of SharePoint. With WSS3, the search functions improved to support this properly too </li><li>Support for forms & InfoPath in SharePoint (MOSS) and business process automation, including workflows, which don’t require MOSS. </li><li>Of course, SharePoint provides an intranet/extranet solutions with a Portal into other sites, and the personal/social elements of My Site </li><li>The core functionality of document management is OK and supports basic requirements for compliance and information security. Note: there is no formal compliance support in Sharepoint. Beyond this the reporting and auditing features do not stand up and there is no support for HSM. </li><li>The business intelligence (BI) features have improved greatly with the use of Excel Services, KPIs, and the Business Data Connector (BDC). Excel Services is pretty cool and renders Excel worksheets including charts and pivot tables, in SharePoint sites. </li></ul><p>We are going to be developing some concept services that use the features of SharePoint, Exchange and CRM. If you're interested in this, or developing your own applications, see <a href="http://www.saas.co.uk/">http://www.saas.co.uk/</a></p><p>thanks, Dan </p>Dan Germainhttp://www.blogger.com/profile/14258985817109954427noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-85818238725000243532008-04-18T13:36:00.011+01:002008-04-18T17:05:44.860+01:00Hosted Exchange for the world<a href="http://bp0.blogger.com/__xtL37U3R8s/R9knJ4H-5HI/AAAAAAAAABw/izD0rdzhT9c/s1600-h/me.jpg"><img id="BLOGGER_PHOTO_ID_5177212297277269106" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp0.blogger.com/__xtL37U3R8s/R9knJ4H-5HI/AAAAAAAAABw/izD0rdzhT9c/s320/me.jpg" border="0" /></a><br /><br /><br /><br /><br /><br /><br />Large Hosted Exchange providers can get bitten by scheduled maintenance – it will always be in everyones contract, but what happens when a certain percentage of your customers are outside your timezone? – worse still, substantially.<?xml:namespace prefix = o /><o:p></o:p><br /><br /><p class="MsoNormal">To expand your Hosted mailboxes you have to reach further than your own country – and a lot of Hosted Exchange providers can say they host mailboxes for companies across both the Americas, Europe and the Middle East/Asias. </p><p class="MsoNormal"><br /><a href="http://bp2.blogger.com/__xtL37U3R8s/SAiXE72d29I/AAAAAAAAAC4/XNjc7JETPQU/s1600-h/GMTmap.JPG"><img id="BLOGGER_PHOTO_ID_5190564681585908690" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp2.blogger.com/__xtL37U3R8s/SAiXE72d29I/AAAAAAAAAC4/XNjc7JETPQU/s320/GMTmap.JPG" border="0" /></a></p><p class="MsoNormal"></p><p class="MsoNormal"></p><p class="MsoNormal"></p><p class="MsoNormal"></p><p class="MsoNormal"></p><p class="MsoNormal"></p><p class="MsoNormal"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br />Intelligence has to be added to your provisioning portal – otherwise your Hong Kong users from Company A could be put on the same Exchange Server (not necessarily the same Mailstore or even Storage Group) as the rest of Company A’s users from Europe. And what’s worse? The rest of the users on the Exchange Server are based in Europe. How is the scheduled maintenance justified to the Hong Kong contigent when it's happening during their working day?</p><p class="MsoNormal">So how does scheduled maintenance come into effect here?</p><p class="MsoNormal">Working out of hours to GMT isn’t going to cut it for the users in Hong Kong as their day is still in full swing – this is where careful planning and design is required. The ideal answer is to carve up the World Map into set zones, so whether a single company is from Dubai, or a single company has offices in Dubai, Europe and the USA you do not affect their respective core working hours. This requires a lot of Dev work - as although HMC supports provisioning to multiple stores for a customer, it doesn’t have the intelligence of splitting users between ‘time zone Exchange Server farms’ based on their location for example. This is where in-house or outsourced Dev work is required.<o:p></o:p></p><p class="MsoNormal">Suffice to say our current Exchange 2003 solution doesn’t have this feature – we support the provisioning to multiple databases – even across multiple Exchange Servers – however there is not the intelligence that is required for a Hosted Exchange supplier to rule all time zones and keep customers that have offices in some or all, happy.<o:p></o:p></p><p class="MsoNormal">Our Exchange 2007 platform will have this – it will be a phase II or III step and time zone provisioning won’t be available at launch, but it is coming. It is a needed solution for to successfully achieve 100,000 mailboxes and beyond.<br /><br /><br /><span style="font-family:verdana;">Oliver Moazzezi</span><br /><span style="font-family:verdana;"></span><br /><span style="font-family:verdana;">MVP - Exchange Server<br /><a href="http://bp1.blogger.com/__xtL37U3R8s/R9aek4H-47I/AAAAAAAAAAM/KRJZED4DTd4/s1600-h/MVPLogo.gif"></a></span><br /><span style="font-family:Verdana;"></span><a href="http://bp1.blogger.com/__xtL37U3R8s/R9kOmIH-5EI/AAAAAAAAABU/1pxHjT7-VGA/s1600-h/MVPLogo.gif"><img id="BLOGGER_PHOTO_ID_5177185294817879106" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp1.blogger.com/__xtL37U3R8s/R9kOmIH-5EI/AAAAAAAAABU/1pxHjT7-VGA/s320/MVPLogo.gif" border="0" /></a></p>Oliver Moazzezihttp://www.blogger.com/profile/06204760006275603297noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-71592017428271319792008-04-18T11:06:00.009+01:002008-04-18T17:05:23.398+01:00Exporting email addresses from Active Directory<a href="http://bp0.blogger.com/__xtL37U3R8s/R9knJ4H-5HI/AAAAAAAAABw/izD0rdzhT9c/s1600-h/me.jpg"><img id="BLOGGER_PHOTO_ID_5177212297277269106" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp0.blogger.com/__xtL37U3R8s/R9knJ4H-5HI/AAAAAAAAABw/izD0rdzhT9c/s320/me.jpg" border="0" /></a><br /><br /><br /><br /><br /><br /><br />This seems to be a hot topic all the time in the newsgroups so....<br /><br />Run this at the cmd prompt on one of your Windows 2000 and above servers.<br /><br />ldifde -f C:\youremailexport.txt -l proxyaddresses<br /><br />Replace C:\youremailexport.txt with whatever drive letter and text file name you want.<br /><br />Here's a great kb explaining ldifde <a href="http://support.microsoft.com/kb/237677">http://support.microsoft.com/kb/237677</a><br /><br />Have fun!<br /><br /><br /><span style="font-family:verdana;">Oliver Moazzezi</span><br /><span style="font-family:verdana;"></span><br /><span style="font-family:verdana;">MVP - Exchange Server<br /><a href="http://bp1.blogger.com/__xtL37U3R8s/R9aek4H-47I/AAAAAAAAAAM/KRJZED4DTd4/s1600-h/MVPLogo.gif"></a></span><br /><span style="font-family:Verdana;"></span><a href="http://bp1.blogger.com/__xtL37U3R8s/R9kOmIH-5EI/AAAAAAAAABU/1pxHjT7-VGA/s1600-h/MVPLogo.gif"><img id="BLOGGER_PHOTO_ID_5177185294817879106" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp1.blogger.com/__xtL37U3R8s/R9kOmIH-5EI/AAAAAAAAABU/1pxHjT7-VGA/s320/MVPLogo.gif" border="0" /></a><br /><br /><br /><br /><br /><span style="font-family:Verdana;"></span>Oliver Moazzezihttp://www.blogger.com/profile/06204760006275603297noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-60311837031016191862008-04-09T00:59:00.002+01:002008-04-09T01:01:20.410+01:00Exchange as an application platformI’m really happy to announce that Cobweb will be launching another major service later this year – Hosted Microsoft Dynamics CRM 4.0<br />We’ve made the purchase and scheduled the deployment, thus making our commitment to this.<br />This is made possible with the deployment of Parallels Automation (aka SWsoft PEM) into our hosted platform. Parallels Automation is key to the development of this platform, giving us an online shop and a suitable billing system for hosted per-user/per-month service subscriptions. Deploying CRM and connecting this to Exchange 2007 is really exciting for me. It’s going to finally unlock the power of the platform that we’ve build and developed. Our platform is about so much more than just an Exchange mailbox - it's an application platform.<br /><br />The news was released today at the Microsoft Hosting Summit in Seattle – Mark and I are there at the moment, and it’s raised a few surprised eye brows that we'll be quick to market with this. We will be one of the first in Europe to be doing this in a way that connects this to Hosted Exchange. Parallels are pushing out some PR in the industry around this too - <a href="http://www.hostreview.com/news/press/080408SWsoft.html">http://www.hostreview.com/news/press/080408SWsoft.html</a> which is nice to see.<br /><br />CRM4.0 is an in-demand service at the moment so exciting times lie ahead.Dan Germainhttp://www.blogger.com/profile/14258985817109954427noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-65687182609323931152008-04-08T16:34:00.003+01:002008-04-08T16:40:57.985+01:00Windows 2008 Core Configurator Tool !I came across this very cool tool to help configure a Windows 2008 Core server without needing to lookup all the CLI commands :-)<br /><br /><a href="http://blogs.microsoft.co.il/files/folders/guyt/entry68860.aspx">http://blogs.microsoft.co.il/files/folders/guyt/entry68860.aspx</a><br /><br />Wayne HollombyWayne Hollombyhttp://www.blogger.com/profile/08444530923558423805noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-70952160915624667122008-04-08T12:08:00.019+01:002008-04-08T12:54:18.054+01:00Mutual authentication and URL Branding with an Outlook Anywhere / RPC over HTTPs connection<a href="http://bp0.blogger.com/__xtL37U3R8s/R9knJ4H-5HI/AAAAAAAAABw/izD0rdzhT9c/s1600-h/me.jpg"><img id="BLOGGER_PHOTO_ID_5177212297277269106" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp0.blogger.com/__xtL37U3R8s/R9knJ4H-5HI/AAAAAAAAABw/izD0rdzhT9c/s320/me.jpg" border="0" /></a><br /><br /><br /><br /><br /><br />With Exchange 2007 not ‘officially’ supporting Forms Based Authentication nor Outlook Anywhere on more than one site (whether that’s the Default Site or not), it has become slightly more difficult to create URL branding for customers that require this within a Hosted environment. With Exchange 2003 you could create multiple sites and FBA was supported in all – Microsofts stance with Exchange 2007 is that if you need FBA on more than one site per CAS then you use ISA Server to support this. And another issue, although the use of ISA allows multiple sites with FBA enabled (albeit offloaded on the ISA server/s) still only one site is supported for the use of Outlook Anywhere (read: RPC over HTTPs). Again with Exchange 2003 it was simply a case of copying the RPC Virtual Directory to your other sites.<br /><br />The advent of SAN (Subject Alternative Name) certificates have greatly helped our design of a Hosted Exchange 2007 infrastructure here at Cobweb. This has allowed us to implement cost effective Client Access Server design and support URL branding for the customers that require it – whilst minimising costs (dedicated CAS servers for every branding OWA URL we support or indeed take on with new business). For example an Exchange Hoster that wants to stay within a supported solution by Microsoft, that had say, 10 dedicated OWA URL’s would at a minimum have to deploy 10 CAS servers – and that doesn’t even take into account HA. To achieve that (at the most basic level without taking the numbers of users hitting each URL) you would need 20.<br /><br />This is where SAN Certs come into their own. All branded OWA URLs can be appended to the certificate along with other Exchange services/protocols (autodiscover, POP3, IMAP4 etc). This helps a Hoster significantly as well as give benefits to normal in-house deployments.<br /><br />There is one ‘gotcha’ however when using a SAN Cert for multiple OWA URLs for Outlook Anywhere access, if you enable mutual authentication for the session, you can’t connect on any of the Subject Alternative Names. This is due the client explicitly looking for a principle name in the certificate (which is matched to the Subject field of the cert):<br /><br /><br /><br /><a href="http://bp3.blogger.com/__xtL37U3R8s/R_tSaCQGdbI/AAAAAAAAACY/DAb9MJtIZVw/s1600-h/1.JPG"><img id="BLOGGER_PHOTO_ID_5186830003081737650" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp3.blogger.com/__xtL37U3R8s/R_tSaCQGdbI/AAAAAAAAACY/DAb9MJtIZVw/s320/1.JPG" border="0" /></a><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br />Mutual Authentication isn’t necessary as all client machines connecting to us are deemed non domain joined (they could very well be in their own domain however) and these clients machines are unlikely to have any certificates published to them from their own Certificate Authorities.<br /><br />Once this checkbox was removed, Outlook Anywhere worked for any of the branded OWA URLs held in the Subject Alternative Name field of the certificate.<br /><br />Here is the Subject Alternative Name field of a cert:<br /><br /><br /><a href="http://bp2.blogger.com/__xtL37U3R8s/R_tbsyQGddI/AAAAAAAAACo/BUslgZ31wWo/s1600-h/2.JPG"><img id="BLOGGER_PHOTO_ID_5186840220808934866" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp2.blogger.com/__xtL37U3R8s/R_tbsyQGddI/AAAAAAAAACo/BUslgZ31wWo/s320/2.JPG" border="0" /></a><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br />Interestingly, the first OS to support Subject Alternative Names was Windows 98.<br /><br />For Microsoft reference on creating Exchange Certificates and support for SAN certs with Exchange 2007 using the New-ExchangeCertificate PowerShell command see:<br /><br />‘Certificate Use in Exchange Server 2007’ <a href="http://technet.microsoft.com/en-us/library/bb851505(EXCHG.80).aspx">http://technet.microsoft.com/en-us/library/bb851505(EXCHG.80).aspx</a><br /><br />‘Exchange 2007 lessons learned - generating a certificate with a 3rd party CA ‘ <a href="http://msexchangeteam.com/archive/2007/02/19/435472.aspx">http://msexchangeteam.com/archive/2007/02/19/435472.aspx</a><br /><br />‘Unified Communications Certificate Partners for Exchange 2007 and for Communications Server 2007 ‘ <a href="http://support.microsoft.com/kb/929395">http://support.microsoft.com/kb/929395</a><br /><br /><br /><br /><br /><span style="font-family:verdana;">Oliver Moazzezi</span><br /><span style="font-family:verdana;"></span><br /><span style="font-family:verdana;">MVP - Exchange Server<br /><a href="http://bp1.blogger.com/__xtL37U3R8s/R9aek4H-47I/AAAAAAAAAAM/KRJZED4DTd4/s1600-h/MVPLogo.gif"></a></span><br /><span style="font-family:Verdana;"></span><a href="http://bp1.blogger.com/__xtL37U3R8s/R9kOmIH-5EI/AAAAAAAAABU/1pxHjT7-VGA/s1600-h/MVPLogo.gif"><img id="BLOGGER_PHOTO_ID_5177185294817879106" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp1.blogger.com/__xtL37U3R8s/R9kOmIH-5EI/AAAAAAAAABU/1pxHjT7-VGA/s320/MVPLogo.gif" border="0" /></a><br /><br /><br /><br /><br /><span style="font-family:Verdana;"></span>Oliver Moazzezihttp://www.blogger.com/profile/06204760006275603297noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-31506252659207213932008-03-26T20:20:00.002Z2008-03-26T20:25:45.735ZMicrosoft Exchange Server 2007 SP1 Update Rollup<p>Earlier this month Microsoft released the first Exchange Server 2007 SP1 Rollup, which contains at least 32 post-SP1 updates and fixes! (Good to see these issues being fixed) </p><p>The KB article is here <a href="http://support.microsoft.com/?kbid=945684">http://support.microsoft.com/?kbid=945684</a> with the download links etc. although it's available on Windows Update too</p><p>Note: you should only apply this rollup to Exchange 2007 environments with SP1 already installed. if you don't have SP1 then... you need it </p><span></span>Dan Germainhttp://www.blogger.com/profile/14258985817109954427noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-26460072714803786162008-03-19T17:12:00.003Z2008-03-19T17:35:49.877ZPermissions for PST Import/Export via cmdletsImporting and exporting mailboxes to/from PST files is a big deal for a lot of Exchange administrators. So it wasn't surprising when a great cry arose from the masses upon discovery that not only was this feature missing from Exchange 2007 RTM, but Microsoft had also stated they wouldn't support ExMerge running against a 2007 server. Your only option was to perform these tasks using an Outlook client, which is of course tedious and far too slow when dealing with more than, say, 1 mailbox. What was an overburdened Exchange admin to do?<br /><br />Well if you're like this overburdened Exchange admin you waited for Service Pack 1 and the new cmdlets for handling PST import/export that came with it. Salvation!<br /><br />But alas, these new cmdlets came with one big caveat that put a huge crimp in the way our company does migrations today. That crimp was the permissions requirements. Straight from the pages of Microsoft documentation:<br /><br /><em>"The user running the task must be an Exchange Organization Administrator or an Exchange Server Administrator on the server where the mailbox to export or import lives."</em><br /><em></em><br />Argh! This was a huge pain for my company because the group of people that does ExMerge migrations all day every day were not actually Exchange administrators. They were Exchange view-only admins, and were simply granted Send As and Receive As permissions to the mailboxes they were migrating. I wasn't too keen on granting these people Exchange Server Admin so they could run amok. After all, the old way worked great with ExMerge, but now Microsoft was requiring administrator level permissions to perform the same function.<br /><br />Or were they? Well, some testing revealed that Microsoft isn't quite correct about the requirements to run their import and export mailbox cmdlets. Administer Information Store, Send As, and Receive As were granted to our migration group on the Exchange 2007 Mailbox server databases, and what do you know... they can run the cmdlets just fine. Crisis averted!<br /><br />On a final note, ExMerge works just fine against Exchange 2007 as long as the Mailbox server has a Public Folder database, but since it isn't supported our company has decided it's not worth the (infinitessimally small, I'm sure) risk of damaging a database and being told "you're on your own" by the boys in Redmond.Matthew Van Sicklerhttp://www.blogger.com/profile/09516369708973457637noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-79323735159758871802008-03-13T21:52:00.002Z2008-03-13T21:54:25.818ZGAL lookups in Entourage<p>If you have a Mac and a mailbox on an Exchange Server you'll probably use Entourage to access it. You loose out on some features that are present in Outlook, but generally you can live without them.</p><p>Entourage uses LDAP to get directory information, but in most organisation this isn't going to be available over the internet. It is possible to deploy a secure LDAP server, but not many organisations and hosters make these over the internet.</p><p>Another solution is to extend Entourage using a script that connects to OWA and performs the lookup that way. Scripts are simple install and this one is easy to use whether you are creating an email or inviting people to a meeting.</p><p>To get the solution check out this site, <a title="http://www.entourage.mvps.org/exchange/exchangelookups.html" href="http://www.entourage.mvps.org/exchange/exchangelookups.html">http://www.entourage.mvps.org/exchange/exchangelookups.html</a>.</p><p> </p><p>Daniel Noakes </p>Daniel Noakeshttp://www.blogger.com/profile/11255834577779724634noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-14733909342430784902008-03-13T09:45:00.009Z2008-03-13T13:14:13.616ZAdding a Windows 2008 Core Server to a Domain<a href="http://bp0.blogger.com/__xtL37U3R8s/R9knJ4H-5HI/AAAAAAAAABw/izD0rdzhT9c/s1600-h/me.jpg"><img id="BLOGGER_PHOTO_ID_5177212297277269106" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp0.blogger.com/__xtL37U3R8s/R9knJ4H-5HI/AAAAAAAAABw/izD0rdzhT9c/s320/me.jpg" border="0" /></a><br /><div></div><div></div><div></div><div></div><div></div><div></div><div></div><div>To join a 2008 core server to a domain run the following command:<br /><br /><br /><br /><br /><br /><strong>netdom join W2K8DC04 /domain:home.local /userd:yourusernamehere /passwordd:yourpasswordhere</strong> </div><div></div><div><br /></div><div>Note: the account must have the correct priviledges to add a machine to the domain, also passwordd isn't a typo - and because this is the command prompt your password isn't hashed *******so make sure no one is looking over your shoulder ;-)<br /><br /><strong>Update:</strong> you can just enter a single * and it will then prompt for a password that is hashed.<br /><br />Once the server has rebooted you can verify this by running:<br /><br /><strong>netdom verify w2k8dc04</strong><br /><br /><a href="http://bp3.blogger.com/__xtL37U3R8s/R9j4E4H-5DI/AAAAAAAAABM/9LTd_q13wV4/s1600-h/6.jpg"><img id="BLOGGER_PHOTO_ID_5177160534331417650" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp3.blogger.com/__xtL37U3R8s/R9j4E4H-5DI/AAAAAAAAABM/9LTd_q13wV4/s320/6.jpg" border="0" /></a><br /><strong></strong><br /><strong></strong><br /><strong></strong><br /><strong></strong><br /><strong></strong><br /><strong></strong><br /><strong></strong><br /><strong></strong><br /><strong></strong><br /><strong></strong><br /><strong></strong><br /><span style="font-family:verdana;">Oliver Moazzezi</span><br /><span style="font-family:verdana;"></span><br /><span style="font-family:verdana;">MVP - Exchange Server<br /><a href="http://bp1.blogger.com/__xtL37U3R8s/R9aek4H-47I/AAAAAAAAAAM/KRJZED4DTd4/s1600-h/MVPLogo.gif"></a></span><br /><span style="font-family:Verdana;"></span><a href="http://bp1.blogger.com/__xtL37U3R8s/R9kOmIH-5EI/AAAAAAAAABU/1pxHjT7-VGA/s1600-h/MVPLogo.gif"><img id="BLOGGER_PHOTO_ID_5177185294817879106" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp1.blogger.com/__xtL37U3R8s/R9kOmIH-5EI/AAAAAAAAABU/1pxHjT7-VGA/s320/MVPLogo.gif" border="0" /></a><br /><br /></div><span style="font-family:Verdana;"></span>Oliver Moazzezihttp://www.blogger.com/profile/06204760006275603297noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-34610252070790879172008-03-12T13:14:00.001Z2008-03-12T14:29:33.301ZEntourage 2008 reliabilty improvementsMicrosoft released an update to Office 2008 for Mac yesterday, <a href="http://support.microsoft.com/kb/948057">http://support.microsoft.com/kb/948057</a>. There are a number of Entourage 2008 reliability improvements including contact and calendar synchronisation with Exchange server. This has been a problem for a lot of users, as contacts were not synchronising between Entourage 2008 and Exchange.<br /><br />If have Entourage 2008 users you should think about installing the update.<br /><br />DanielDaniel Noakeshttp://www.blogger.com/profile/11255834577779724634noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-79210226780829346902008-03-12T11:02:00.009Z2008-03-13T13:09:16.620ZHosted versus In-House<a href="http://bp2.blogger.com/__xtL37U3R8s/R9kndYH-5II/AAAAAAAAAB4/-haf3VPxaIw/s1600-h/me.jpg"><img id="BLOGGER_PHOTO_ID_5177212632284718210" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp2.blogger.com/__xtL37U3R8s/R9kndYH-5II/AAAAAAAAAB4/-haf3VPxaIw/s320/me.jpg" border="0" /></a><br /><div><span style="font-family:verdana;font-size:85%;">We recently came across an article that weighs up the pros and cons of each. I specifically wanted to address the questions for the Hosted Exchange provider.</span><br /><span style="font-family:verdana;font-size:85%;"></span><br /><span style="font-family:verdana;font-size:85%;">The article is here: </span><br /><span style="font-family:verdana;font-size:85%;"></span><br /><a href="http://theessentialexchange.com/blogs/michael/archive/2007/12/17/moving-from-in-house-exchange-to-hosted-exchange.aspx"><span style="font-family:verdana;font-size:85%;">http://theessentialexchange.com/blogs/michael/archive/2007/12/17/moving-from-in-house-exchange-to-hosted-exchange.aspx</span></a><br /><span style="font-family:verdana;font-size:85%;"></span><br /><span style="font-family:verdana;font-size:85%;">The questions it poses are below; i've answered each one if taking the Hosted Exchange Solution provided by Cobweb.</span><br /><span style="font-family:verdana;font-size:85%;"></span><br /><br /><span style="font-family:verdana;font-size:85%;">1. Does the hosting environment allow multiple hosting clients to have contacts with the same e-mail address? (This question can be restated as: how does the hosting software deal with SMTP address collisions?)</span><br /><span style="font-family:Verdana;font-size:85%;"></span><br /><span style="font-family:Verdana;font-size:85%;"><strong>The answer is yes _and_ no. Active Directory cannot support two objects with an identical proxyaddress, and unfortunately the OAL is built based on objects having this attribute. The solution is to remove the proxyaddress, giving the contact just it's targetaddress attribute. This allows the exact same contact to exist in multiple customers OU's, but will remove the contact from the OAL. We have been working with Microsoft on this issue, and a resolution to this is promised in the next version of Active Directory/Exchange.</strong></span><br /><span style="font-family:verdana;font-size:85%;"></span><br /><br /><span style="font-family:verdana;font-size:85%;">2. Does the hosting environment allow you to share SMTP address space, either as a master or as a slave environment, with a hosted SMTP domain? (This question can be restated as: can you do a step-wise migration, or do you have to migrate all mailboxes at once?)</span><br /><br /><p><span style="font-family:verdana;font-size:85%;"><strong>Yes we have supported this for around two years. We can share SMTP address space and either pass mail over VPN tunnels or over the Internet using SMTP over TLS. We also provide SMTP over the Internet for customers that are not concerned about potential internal mail being sent in clear text across the Internet. In all cases we suggest TLS/VPN solutions, which we manage with the customer and help setup.</strong></span></p><br /><p><span style="font-family:verdana;font-size:85%;">3. Does the hosting environment support Deleted Item Retention? For how long? Does their deployment environment set the DumpsterAlwaysOn registry key for Outlook? (This question can be restated as: what happens when someone deletes something they didn't mean to!)</span></p><br /><p><span style="font-family:verdana;font-size:85%;"><strong>We support DIR for 14 days (two weeks), we also keep deleted mailboxes for 31 (effectively 1 calendar month), of course all mailboxes deleted after this time are still recoverable from our backups.</strong></span></p><br /><p><span style="font-family:verdana;font-size:85%;">4. Does the hosting environment support Deleted Mailbox Retention? For how long? (Restatement: can I easily restore the mailbox if my company administrator deletes a mailbox by mistake?)</span></p><br /><p><span style="font-family:verdana;font-size:85%;"><strong>Answered above.</strong></span></p><br /><p><span style="font-family:verdana;font-size:85%;">5. Does the hosting company do backups? How often and how long do they retain them? Can they do single mailbox recovery? (Restatement: if the hosting company has a "disaster" can they recover my mailboxes? Also, if the timeframe for Deleted Mailbox Retention has expired, can I recover the company president's mailbox from last month?)</span></p><br /><p><span style="font-family:verdana;font-size:85%;"><strong>Again partially answered above, we keep monthly backups for 7 years (yes 7 years). We can restore a mailbox to any given day in the past 4 week window - after that we keep one full backup per month.</strong></span></p><span style="font-family:verdana;font-size:85%;"><br /><p><br />6. Does the hosting environment support journaling? What are the data-retention options for the journal mailbox? Can I have an external interface to a journal solution?</p><br /><p><strong>Cobweb supports Journaling, we can Journal your mailboxes and send them to an external solution of your choosing (we have no control of this data - you ensure this provider can do the job), or we can Journal your mail ourselves. we use Zantaz EAS and support envelope journaling. We have default plans of 1, 2, 5 and 7 years. We can also provide custom retention policies. This is searchable using a built in Zantaz EAS plugin, which retrieves the archived mail from your own personal document store over SSL.</strong></p><br /><p><br />7. Does the hosting environment support catchall mailboxes? (This is simple a feature that some companies use. Others don't.)</p><br /><p><strong>We don't support this, we could but I can honestly say i've never had any customers require this</strong></p><br /><p><br />8. Does the hosting environment have a decent anti-spam solution? (More than the Outlook Junk Mail Filter!) Does the anti-spam solution support individual mailbox quarantines? If there is a false-positive, how can you get your file/message delivered?</p><br /><p><strong>We use MessageLabs as standard for all Hosted Exchange mailboxes. We also use Antigen for virus detection on the actual Exchange Servers themselves - supporting 4 AV engines.</strong></p><br /><p><br />9. Does the hosting environment allow you to truly white-label their services? (Restatement: can you have a custom OWA URL? Can you have a custom RPC/HTTP URL? When you connect to an SMTP virtual server, does it say YOUR domain name?)</p><br /><p><strong>Yes you sure can, although there is of course an extra cost associated with this.</strong></p><br /><p><br />10. Does the hosting environment allow you to have custom OWA themes? Does it support OWA segmentation</p><br /><p><strong>We support OWA segmentation, we base this around our own custom mailbox plans. We can support custom OWA themes but so far we have not had any customers require this.</strong></p><br /><p><br />11. Does the hosting environment support SPF and/or Sender-ID incoming? Does it require it outgoing? Can you decide or are you limited to their default?</p><br /><p><strong>MessageLabs support SPF, we don't use Sender-ID within the Exchange Org, we help customers setup their own SPF records.</strong></p><br /><p><br />12. Does the hosting environment support SSL for OWA? TLS for SMTP? Form-based authentication for OWA? Two-factor authentication for OWA and for Outlook?</p><br /><p><strong>SSL for OWA with FBA - Yes<br />SMTP over TLS - Yes<br />IMAPS - Yes<br />POP3S - Yes<br />RPC over HTTPS - Yes</strong></p><br /><p><strong>We currently do not provide two factor authentication processes.</strong></p><br /><p><br />13. Does the hosting environment allow you to specify on a per-user basis who gets EAS (ActiveSync)? Blackberry services? Goodlink services?</p><br /><p><strong>Yes, which user gets what is entirely customisable via the customers Portal Administrators.</strong></p><br /><p><br />14. Does the hosting environment allow you to create custom address lists?</p><br /><p><strong>Currently no, this is something I want to bring into our Exchange 2007 offering. Support for 3 to 5 custom address lists is what I want to achieve.</strong></p><br /><p><br />15. Does the hosting environment allow you to force an Offline Address Book (OAB) update?</p><br /><p><strong>Yes, this is done simply by modifying a user in our Portal, we then automatically set instructions to rebuild your OAL.</strong></p><br /><p><br />16. How is disk space aggregated? Is each mailbox billed separately? Is the company/domain aggregated together? Can different mailboxes have different default allocations? Can you manage the limits? Can you get disk space reports? Can you create/manage a "Mailbox Manager" policy for your domain?<br /></p><br /><p><strong>Whilst I cannot answer any billing questions, I can state mailbox size is highly configurable. Bought two mailboxes with the default of 200mb each for you and your secretary? Don't need that space for her? No problem, take space off her mailbox and assign it to yourself or your public folders.</strong></p><br /><p><br />17. What are the hard limits on mailboxes sizes?</p><br /><p><strong>We don't have any, we do warn (due to current limitations in certain administration tools and tasks) against going over 2GB.</strong></p><br /><p><br />18. Does the hosting environment run a gateway anti-virus solution? An information store anti-virus solution? A file-based anti-virus solution? If there is a false-positive, how can you get your file/message delivered?</p><br /><p><strong>MessageLabs for the gateway, Antigen on the servers. Customers get their own Spam Manager Portal to login and check any spam messages that have been quarantined.</strong></p><br /><p><br />19. Does the hosting environment support "Send As" permissions and "Send On Behalf Of" permissions? Can you manage this yourself?</p><br /><p><strong>We do support this yes, our existing Portal does not support this feature, our new Exchange 2007 Portal will support this.</strong></p><br /><p><br />20. Does the hosting environment support LDAP access to your address books?</p><br /><p><strong>No, however watch this space.</strong></p><br /><p><br />21. Do you have access to SMTP log files? Do you have access to message tracking log files?</p><br /><p><strong>SMTP protocol logging is turned on and off by Cobweb as/when there is any possible issue. In regards to access to Message Tracking, the answer is no. However this is something I want to incorporate into our Portal.</strong></p><br /><p><br />22. What is the maximum incoming message size? The maximum outgoing message size? Can you adjust it?</p><br /><p><strong>20MB, customers cannot adjust this currently no.</strong></p><br /><p><br />23. What is the maximum number of message recipients? Can you adjust it?</p><br /><p><strong>500, this is not configurable.</strong></p><br /><p><br />24. Does the hosting environment support public folders? How many? How big? Can you mail-enable public folders?</p><br /><p><strong>We support Public Folders yes. We also support mail enabling them.</strong></p><br /><p><br />25. Does the hosting environment support an interface to SharePoint services?</p><br /><p><strong>We current offer Sharepoint 2.0. We are launcing our new Sharepoint 3.0 service sometime over the Summer.</strong></p><br /><p><br />26. Does the hosting environment allow for external SMTP relays by IP address? What about by authorized users?</p><br /><p><strong>We support this yes.</strong></p><br /><p>27. Does the hosting environment allow for POP-3 or IMAP users to access Exchange mailboxes?</p><br /><p><strong>This is configurable by the customer within the Portal.</strong></p><br /><p><br />28. Does the hosting company offer a network Service Level Agreement (SLA)? Does the hosting company offer an Exchange SLA? Does the SLA have any teeth?</p><br /><p><strong>Check </strong><a href="http://www.cobweb.com/"><strong>http://www.cobweb.com</strong></a><strong> for our SLA, I believe currently it is 99.9%, which we meet.</strong></p><br /><p>Oliver</span></p><br /><br /><span style="font-family:verdana;">Oliver Moazzezi</span><br /><span style="font-family:verdana;"></span><br /><span style="font-family:verdana;">MVP - Exchange Server<br /><a href="http://bp1.blogger.com/__xtL37U3R8s/R9aek4H-47I/AAAAAAAAAAM/KRJZED4DTd4/s1600-h/MVPLogo.gif"></a></span><br /><span style="font-family:Verdana;"></span><a href="http://bp1.blogger.com/__xtL37U3R8s/R9kOmIH-5EI/AAAAAAAAABU/1pxHjT7-VGA/s1600-h/MVPLogo.gif"><img id="BLOGGER_PHOTO_ID_5177185294817879106" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp1.blogger.com/__xtL37U3R8s/R9kOmIH-5EI/AAAAAAAAABU/1pxHjT7-VGA/s320/MVPLogo.gif" border="0" /></a><br /><span style="font-family:Verdana;"></span></div>Oliver Moazzezihttp://www.blogger.com/profile/06204760006275603297noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-14503286170315633432008-03-11T21:07:00.018Z2008-03-13T13:09:48.899ZPlaying with Windows Server 2008 Core<a href="http://bp1.blogger.com/__xtL37U3R8s/R9knlIH-5JI/AAAAAAAAACA/-vIi0VlmSPs/s1600-h/me.jpg"><img id="BLOGGER_PHOTO_ID_5177212765428704402" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp1.blogger.com/__xtL37U3R8s/R9knlIH-5JI/AAAAAAAAACA/-vIi0VlmSPs/s320/me.jpg" border="0" /></a><br /><div><span style="font-family:verdana;">I have been playing around Windows 2008. Specifically with the Core version of the product, in regards to designing a solution to fully support Entourage clients in a Hosted Exchange enviroment.</span><br /><br /><span style="font-family:verdana;">There were a few hurdles to first overcome however..<br /><br /><br />First is assigning a static IP to your Core installation.<br /><br />I first had to run the following command to list the network adapters (NICs) installed on the server:<br /><br /><strong>netsh interface ipv4 show interfaces<br /></strong><br /><br /><a href="http://bp2.blogger.com/__xtL37U3R8s/R9b1RIH-48I/AAAAAAAAAAU/8rKblOavUpA/s1600-h/1.jpg"><img id="BLOGGER_PHOTO_ID_5176594496296510402" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp2.blogger.com/__xtL37U3R8s/R9b1RIH-48I/AAAAAAAAAAU/8rKblOavUpA/s320/1.jpg" border="0" /></a><br /><br /><br /><br /></span><span style="font-family:verdana;"></span><br /><br /><br /><br /><br /><br /><br /><span style="font-family:verdana;"></span><br /><span style="font-family:verdana;">I then had to specify which adapter I wanted to change the IP for, using the Idx variable.<br /><br />The command to change the IP to static was:<br /><br /><strong>netsh interface ipv4 set address name="2" source=static address=192.168.20.107 mask=255.255.255.0 gateway=192.168.20.1 </strong></span><br /><span style="font-family:verdana;"><strong></strong></span><br /><span style="font-family:verdana;">(obviously disregard my network settings)</span><span style="font-family:verdana;"><br /></span><span style="font-family:verdana;"><br /><br /><a href="http://bp0.blogger.com/__xtL37U3R8s/R9b1xoH-49I/AAAAAAAAAAc/iKwGQRkyBfg/s1600-h/2.jpg"><img id="BLOGGER_PHOTO_ID_5176595054642258898" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp0.blogger.com/__xtL37U3R8s/R9b1xoH-49I/AAAAAAAAAAc/iKwGQRkyBfg/s320/2.jpg" border="0" /></a><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br />Once this was done and I logged back onto the server (although I noted my server wasn't pinging - icmp responses - more on that later) and a simply ipconfig showed the changes had been made:<br /><br /><br /><a href="http://bp0.blogger.com/__xtL37U3R8s/R9b4FoH-5AI/AAAAAAAAAA0/4VGhexrR4hc/s1600-h/3.jpg"><img id="BLOGGER_PHOTO_ID_5176597597262898178" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp0.blogger.com/__xtL37U3R8s/R9b4FoH-5AI/AAAAAAAAAA0/4VGhexrR4hc/s320/3.jpg" border="0" /></a><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br />I then had to manually assign DNS servers, the command for this was:<br /><br /><br /><strong>netsh interface ipv4 add dnsserver name="2" address=192.168.20.100 index=1<br /></strong><br /><br />for primary and then:<br /><br /><strong>netsh interface ipv4 add dnsserver name="2" address=192.168.20.101 index=2</strong><br /><br />For secondary .<br /><br />Note: specifying the Idx '2' again and the index=1 or 2 or more, specifying it's another DNS server.<br /><br />I was then in a position to rename the machine, you are assigned a random computer name during the installation.<br /><br />This was performed using:<br /><br /><strong>netdom renamecomputer W47C1k34FRG1 /NewName:W2K8DC03<br /></strong><br /><br /><a href="http://bp3.blogger.com/__xtL37U3R8s/R9b4yYH-5BI/AAAAAAAAAA8/3iCLrjN3y0o/s1600-h/4.jpg"><img id="BLOGGER_PHOTO_ID_5176598366062044178" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp3.blogger.com/__xtL37U3R8s/R9b4yYH-5BI/AAAAAAAAAA8/3iCLrjN3y0o/s320/4.jpg" border="0" /></a><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br />Once the machine had rebooted (shutdown /r) using the command hostname showed the name had changed succesfully.<br /><br /><br /><a href="http://bp1.blogger.com/__xtL37U3R8s/R9b6O4H-5CI/AAAAAAAAABE/3EbfMZu3QGQ/s1600-h/5.jpg"><img id="BLOGGER_PHOTO_ID_5176599955199943714" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp1.blogger.com/__xtL37U3R8s/R9b6O4H-5CI/AAAAAAAAABE/3EbfMZu3QGQ/s320/5.jpg" border="0" /></a><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br />More to come later on joining the machine to the domain and making it a Domain Controller, as well as my ICMP issue.<br /><br /><br /><br /><span style="font-family:verdana;">Oliver Moazzezi</span><br /><span style="font-family:verdana;"></span><br /><span style="font-family:verdana;">MVP - Exchange Server<br /><a href="http://bp1.blogger.com/__xtL37U3R8s/R9aek4H-47I/AAAAAAAAAAM/KRJZED4DTd4/s1600-h/MVPLogo.gif"></a></span><br /><span style="font-family:Verdana;"></span><a href="http://bp1.blogger.com/__xtL37U3R8s/R9kOmIH-5EI/AAAAAAAAABU/1pxHjT7-VGA/s1600-h/MVPLogo.gif"><img id="BLOGGER_PHOTO_ID_5177185294817879106" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp1.blogger.com/__xtL37U3R8s/R9kOmIH-5EI/AAAAAAAAABU/1pxHjT7-VGA/s320/MVPLogo.gif" border="0" /></a><br /><span style="font-family:Verdana;"></span><br /><br /><br /><br /></span></div>Oliver Moazzezihttp://www.blogger.com/profile/06204760006275603297noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-56032090468886347072008-03-11T14:35:00.008Z2008-03-13T13:11:06.840Z64bit Domain Controllers<a href="http://bp2.blogger.com/__xtL37U3R8s/R9knsYH-5KI/AAAAAAAAACI/y1RIl_nGMJI/s1600-h/me.jpg"><img id="BLOGGER_PHOTO_ID_5177212889982756002" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp2.blogger.com/__xtL37U3R8s/R9knsYH-5KI/AAAAAAAAACI/y1RIl_nGMJI/s320/me.jpg" border="0" /></a><br /><div><span style="font-family:verdana;"></span> </div><div><span style="font-family:verdana;">What's the benefit you may ask, well plenty if configured correctly!</span><br /><br /></div><span style="font-family:verdana;"></span><div><span style="font-family:verdana;"></span> </div><div><span style="font-family:verdana;"></span> </div><div><span style="font-family:verdana;">Here at Cobweb we've just finished our deployment of 64bit DC's. The project was started as we realised if we kept our existing 32bit Domain Controllers we would actually have to double the number to support both our existing Exchange 2003 infrastructure and the soon to be deployed Exchange 2007 service we are launching. Supporting 40,000 mailboxes (approx: at this time) takes a lot of Directory work and the last thing we wanted to do was rack and deploy another farm of Active Directory servers - especially when Rack Consolidation is proving to be so important now with power restrictions DataCentres are starting to enforce.</span><br /><br /><span style="font-family:verdana;">Ultimately we were left with only one option, upgrade to 64bit.</span><br /><span style="font-family:verdana;"></span><br /><br /><span style="font-family:verdana;">The general rule of thumb for 32bit GCs is to have 1 processor core for every 4 Exchange processors cores. Note I mention core - not actual processor. Having a 64bit GC extends this support to 1 core for every 8 Exchange cores - as long as the server has enough RAM to support loading the entire of the directory (NTDS.dit file) into RAM.</span><br /><br /><span style="font-family:verdana;">Thus upgrading to 64bit Directory servers allowed us to keep the same physical number of servers, without having to worry about rackspace or power considerations - and indeed cooling - and has given us the support for both Exchange 2003 and Exchange 2007 into our infrastructure.</span><br /><br /><br /><span style="font-family:verdana;">Oliver Moazzezi</span><br /><span style="font-family:verdana;"></span><br /><span style="font-family:verdana;">MVP - Exchange Server<br /><a href="http://bp1.blogger.com/__xtL37U3R8s/R9aek4H-47I/AAAAAAAAAAM/KRJZED4DTd4/s1600-h/MVPLogo.gif"></a></span><br /><span style="font-family:Verdana;"></span><a href="http://bp1.blogger.com/__xtL37U3R8s/R9kOmIH-5EI/AAAAAAAAABU/1pxHjT7-VGA/s1600-h/MVPLogo.gif"><img id="BLOGGER_PHOTO_ID_5177185294817879106" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp1.blogger.com/__xtL37U3R8s/R9kOmIH-5EI/AAAAAAAAABU/1pxHjT7-VGA/s320/MVPLogo.gif" border="0" /></a><br /></div><span style="font-family:Verdana;"></span>Oliver Moazzezihttp://www.blogger.com/profile/06204760006275603297noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-254431539438351612008-03-11T10:40:00.007Z2008-03-19T13:16:57.518ZWhen do I work & email?I've installed Xobni now and already I've found it really useful for showing linked conversations and it's a good replacement for the Outlook To-Do bar. <div><div></div><div>The ranking and time of day graph looks good, but I'm not sure it's really that useful yet - I suppose it does show me when interactions occur with my contacts and when's a good time of day for them - <a href="http://bp0.blogger.com/_TFYc6yXQN4E/R9ZqYcHn5RI/AAAAAAAAABg/sKSh56AsDxI/s1600-h/xobin_timeofday.JPG"><img id="BLOGGER_PHOTO_ID_5176441789806535954" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp0.blogger.com/_TFYc6yXQN4E/R9ZqYcHn5RI/AAAAAAAAABg/sKSh56AsDxI/s400/xobin_timeofday.JPG" border="0" /></a><br /><br /><br /></div><div></div><div><br /><br /></div><div></div><div>clearly this person works best in the evening and late evening! (you know who you are!)<br /></div><div></div><div><br /></div><div></div><div></div><div></div><div></div><div></div><div></div><div>So, when do I use Outlook most? Xobni Analytics can show you this, and much more besides;<br /><a href="http://bp0.blogger.com/_TFYc6yXQN4E/R9Zs7cHn5TI/AAAAAAAAABw/KMWTTR1bWBQ/s1600-h/xobin_hourofday.JPG"><img id="BLOGGER_PHOTO_ID_5176444590125212978" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp0.blogger.com/_TFYc6yXQN4E/R9Zs7cHn5TI/AAAAAAAAABw/KMWTTR1bWBQ/s200/xobin_hourofday.JPG" border="0" /></a><br /></div><div></div><div><br /><br /><br /></div><div></div><div><br /><br /><br /></div><div></div></div>Dan Germainhttp://www.blogger.com/profile/14258985817109954427noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-91836361090118219252008-03-05T20:53:00.002Z2008-03-19T13:17:14.978ZDrowning in Email? Get Email Happiness...<p><span style="font-family:arial;font-size:85%;">Apparently, Microsoft are looking to spend a cool few $$ on a start-up called Xobni. This is a neat plug-in for Outlook that replaces the To-Do bar to totally improve the user experience and change the way you use Outlook. </span><a href="http://www.xobni.com/"><span style="font-family:arial;font-size:85%;">http://www.xobni.com/</span></a><span style="font-family:arial;font-size:85%;"> is worth a look, check the video out too.</span></p><p><span style="font-family:arial;font-size:85%;"><br />There’s some analysis of your mailbox which creates a new contact profiles from the content of emails only, and then creates relationships between your contacts. The searching is improved also. I like the email analytics which shows the volume of email and time of day profile of messages to/from a contact profile. I know a few people who’d hit this off the scale ;-)</span></p>Dan Germainhttp://www.blogger.com/profile/14258985817109954427noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-47890690759485473872008-02-28T09:37:00.004Z2008-03-19T13:17:56.004ZExchange 2007 Server roles - a summaryHere's a simple summary of Exchange 2007 server roles, taken from <a href="http://msexchangeteam.com/archive/2006/09/12/428880.aspx">http://msexchangeteam.com/archive/2006/09/12/428880.aspx</a><br /><br />- <strong>Mailbox</strong> (MB): responsible for <strong>hosting mailbox and public folder data</strong>.<br /><br />- <strong>Client Access</strong> (CA): provides mailbox server protocol access (but not MAPI). Similar to Exchange 2003 FrontEnd server, it <strong>enables user to use OWA, POP3/IMAP4 and mobile device (ActiveSync) to access their mailbox</strong>.<br /><br />- <strong>Hub Transport</strong> (HT): handles <strong>mail routing</strong> to the next hop: another Hub Transport server, Edge server or mailbox server. Unlike Exchange 2003 Bridgehead that needs Exchange admin defined routing groups, Exchange 2007 Hub Transport role uses AD site info to determine the mail flow.<br /><br />- <strong>Edge Transport</strong> (ET): The last hop of <strong>outgoing mail </strong>and first hop of <strong>incoming mail</strong>, <strong>acting as a "smart host"</strong> and usually deployed in a perimeter network (DMZ), Edge Transport provides mail quarantine and SMTP service to enhance security. One advantage of this role is that is does not require Active Directory access, so it can function with limited access to the corporate network for increased security.<br /><br />- <strong>Unified Message</strong> (UM): enables end users to access their mailbox, address book, and calendar using <strong>telephone and voice</strong>. IP-PBX or VoIP gateway needs to be installed and configured to facilitate much of the functionality of this server role.Dan Germainhttp://www.blogger.com/profile/14258985817109954427noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-40492793506130619052008-02-25T10:18:00.002Z2008-03-19T13:18:40.303ZGet the best from Outlook 2007 and Exchange 2007 - Part 2<span style="font-family:trebuchet ms;">Here's part 2 of my Top-10 tips for Outlook and Exchange 2007. If you have some others of your own please share them!</span><br /><span style="font-family:trebuchet ms;"></span><br /><span style="font-family:trebuchet ms;">6. Quickly Add a Contact from an E-mail<br />This is a neat trick to keep your list of Contacts current and complete. When the message is open right-click on the person’s name in the <strong>From</strong> field and select <strong>Add to Contacts</strong>.<br />Take a look at that menu – you can also see someone’s Free/Busy status if it’s visible to you!<br /><br />7. Get Organised and colour co-ordinated<br />This is new for Outlook 2007 - Colour Categories. You are able to easily personalise and add categories to any type of information – messages, calendar items, contacts and tasks.<br />It’s simple; </span><span style="font-family:trebuchet ms;"><strong>Right-click – Categorize<br /></strong>You can add and modify colour categories to give you a simple visual way to easily organise your data and search for information. I have categories for “Business Development”, “Management Team”, “Planning”, “Personal” etc.<br /><br /><br />8. Feed Outlook with RSS<br />With Outlook 2007, you can read and manage RSS feeds and blogs from within your mailbox. It’s the right place to do this and you no longer have to leave Outlook to quickly browse the latest news and sports, industry news or favourite blog posts. Of course, you just don’t get the same online experience without a bit of Flash or a few ads.<br /></span><br /><span style="font-family:trebuchet ms;">9. Use OWA on an Exchange 2007-SP1 server<br />Outlook Web Access is a quick and simple, yet sophisticated interface to your mailbox. OWA has improved significantly in Exchange 2007-SP1 with functionality on a par with Outlook 2003. You how have the ability to set different Out Of Office messages for internal and external recipients, both with a reminder to turn it off, or an expiry time; your folders automatically update when new mail arrives, no need to refresh all the time now; reminders are displayed in a drop-down, and not a pop-up that often got blocked; Auto-complete works when adding email addresses to a new mail; Calendaring is very good now with smart scheduling; the list goes on.<br /></span><br /><span style="font-family:trebuchet ms;">10. Make sure you use “Outlook Anywhere” (aka “Cached Exchange Mode”)<br />You work in a local copy of your mailbox (it also allows you to work on email offline) and Outlook connects to Exchange in the background and doesn't hang if there is a break in communication with the Exchange environment. 60% of connections to Exchange use a cached mailbox. For users of laptops, mobile workers, or if you’re on a slower or less reliable network connection, it's a necessity.<br />In Exchange 2007, Outlook Anywhere performance is much improved over the Cached-Exchange-Mode in Exchange 2003.</span>Dan Germainhttp://www.blogger.com/profile/14258985817109954427noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-58196527065931054382008-02-21T13:37:00.008Z2008-03-19T13:18:54.638ZGet the best from Outlook 2007 and Exchange 2007 - Part 1Here’s the first part of my Top-10 list of how to get the best from Microsoft Outlook 2007 and Exchange 2007.<br /><br />If you spend a lot of time working within Microsoft Outlook (and who doesn't!?) these tips can really boost your efficiency. As easy as they are, they are often overlooked and underused. There are usually additional short-cuts and alternative menus for all the tips below.<br /><br />1. Flag for Follow-Up – use this to set Reminders on Messages<br />To set a reminder, which is visible in your Inbox and reminds you to act on or reply to any message, right-click on the message, select <strong>Follow Up</strong>, and choose your <strong>Due By </strong>time and date. You can chose a reminder for Today, Tomorrow, This Week etc.<br />When you click <strong>OK</strong>, the message will be flagged for you to remember to respond to, and the date and time will be automatically kept track of. To clear the flag, right click on the message and choose Clear Flag.<br /><br />2. Use the To-Do Bar to manage your daily priorities and information<br />Check your priorities for the day by looking at the <strong>To-Do Bar</strong>. It shows your flagged messages (follow-ups) and Outlook Tasks in a simple list which you can manage and customise to suit you.<br />Cunningly, the To-Do Bar also connects tasks you may set in other Office 2007 applications including OneNote and Windows SharePoint Services.<br />Check your Calendar too because this is integrated with the To-Do Bar and show items due for action for each day. This allows you to easily schedule and block out time to work on items.<br /><br />3. Permanently Delete Messages<br />When you delete something, hold down the <strong>Shift-key </strong>as you click <strong>Delete </strong>and it’s permanently deleted. You’ll be asked if you want to permanently delete the message, just to make sure, as it doesn’t go into the Deleted Items folder!<br />You can multi select a number of messages, or all folder contents, and it works the same way.<br /><br />4. Quickly Undelete a Message<br /><strong>Ctrl-Z </strong>will bring it back. Works across all Microsoft Office applications too.<br /><br />5. Catch those misspellings and common typos<br />You can easily have Outlook check your spelling in all outgoing messages – very handy if you’re a speedy & error-prone typist. In the <strong>Tools </strong>menu, click on <strong>Options </strong>and the <strong>Spelling </strong>tab, then select <strong>Always check spelling before sending</strong>.Dan Germainhttp://www.blogger.com/profile/14258985817109954427noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-14755890298066291072008-02-04T13:45:00.001Z2008-03-19T13:19:09.622ZNew whitepaper for SP1 and HMC4.0If you're a Hosting provider and/or running HMC, there's a new white paper for Exchange 2007 SP1 and how SP1 features relate to HMC4.0<br />In particular, it addresses key features in anywhere access (inc. OWA and ActiveSync), built-in protection (in.c SCR) , and improvements to performance and scalability.<br /><br />You can download <a href="http://www.microsoft.com/downloads/details.aspx?FamilyID=aa5b83fd-e7f3-4c30-be07-6bec5d9859a3&DisplayLang=en">the whitepaper here</a>Dan Germainhttp://www.blogger.com/profile/14258985817109954427noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-29022016863374943942008-01-30T23:40:00.001Z2008-03-12T14:27:53.205ZWM6 & Gmail play nicelyGetting your personal email on your Windows Mobile can be just as useful as business email. That is of course if your corporate security policy allows it.<br /><br />For ages now I have had my Gmail account setup as IMAP on my Touch Dual, but I wasn't getting mail. So I gave in and used the Gmail app. Well good news, looks like Gmail and Windows Mobile are now playing nicely together.<br /><br />To get the settings go here, <a href="http://mail.google.com/support/bin/answer.py?answer=78886">http://mail.google.com/support/bin/answer.py?answer=78886</a>.Daniel Noakeshttp://www.blogger.com/profile/11255834577779724634noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-63175781295906343652008-01-22T21:51:00.000Z2008-01-22T22:07:31.255ZA view of the future from Exchange Labs<span style="font-family:arial;font-size:85%;">Back in October Microsoft quietly announced Exchange Labs (see </span><a href="http://msexchangeteam.com/archive/2007/10/08/447213.aspx"><span style="font-family:arial;font-size:85%;">here</span></a><span style="font-family:arial;font-size:85%;">) This initiative has the aim of helping the build & testing of the next version of Exchange in a high-scale services environment - selected US universities.</span><br /><br /><span style="font-family:arial;font-size:85%;">For me, there are some interesting developments hidden in here... some highlights;</span><br /><ul><li><span style="color:#000066;">Windows Live ID authentication, that can be used with Messenger, Spaces, and all of the other Windows Live services </span><span style="font-size:85%;color:#000000;"><em>- <span style="font-family:arial;">single authentication, across many many services (not just email)<br /></span></em></span></li><li><span style="color:#000066;">5 GB of mailbox quotas</span> <span style="font-family:arial;font-size:85%;"><em>- this is a sign of things to come. Given that Exchange 2007 is best upto 1-2GB max.does this mean a new storage engine for Exchange finally? Will this be SQL2008 based?<br /></em></span></li><li><span style="color:#000066;">Ability to integrate on-premises Exchange deployment for faculty and staff, with hosted Exchange Labs for students</span><em> <span style="font-size:85%;">- this is probably due to directory and authentication changes, but this means that companies with global offices or dispersed/mobile workforces can now <strong>choose </strong>to combine Exchange systems as the require - on-premise and hosted-service</span></em></li></ul><p><span style="font-family:arial;font-size:85%;">There are also some administration features appearing too, including self-service DL management inside OWA, similar to the Window Mobile features available in OWA today. Some of that detail is <a href="http://technet.microsoft.com/en-us/exchangehelp/exchangelabsedu/default.aspx">here</a></span></p>Dan Germainhttp://www.blogger.com/profile/14258985817109954427noreply@blogger.comtag:blogger.com,1999:blog-5507158607924562609.post-85779203080793819032008-01-21T21:29:00.000Z2008-01-21T22:05:33.430ZWeb Ready document viewing (and some other SP1 improvements)<span style="font-family:arial;">One of the best improvements for Exchange 2007 is the change to the user experience when using Outlook Web Access. You need SP1 to benefit from all the changes, my favourites include Web Ready Document Viewing for the Office 2007 file formats, but you also get the ability to configure server side rules, access to the Deleted Items recovery, S/MIME support, and, in SP1 the return of Public Folder access.</span><br /><div><div><span style="font-family:arial;"><div><br />Web Ready document viewing is simple - "Open as Web Page" renders documents in your browser as HTML without the need to download the document, or have Microsoft Office installed. There is support for Word Excel and PowerPoint in both 2003 & 2007 formats.<br /></div><img id="BLOGGER_PHOTO_ID_5158054241436821442" style="DISPLAY: block; MARGIN: 0px auto 10px; CURSOR: hand; TEXT-ALIGN: center" alt="" src="http://bp1.blogger.com/_TFYc6yXQN4E/R5UXAQkJ58I/AAAAAAAAABY/PrsZ5BO4kxE/s400/webview_docx.JPG" border="0" /> <div>Sometimes OWA is a whole lot easier to use than Outlook. With Microsoft adding many new features with every release, maybe the days of Outlook on the desktop are numbered?</span></div></div></div>Dan Germainhttp://www.blogger.com/profile/14258985817109954427noreply@blogger.com