Recipient Management, Policies, and Permissions in Exchange 2007

1. Recipient Management, Policies, and Permissions in Exchange 2007 • Daniel Kenyon-smith http://blogs.technet.com/danielkenyon-smith/default.aspx

2. Introduction Daniel Kenyon-smith

3. Audience Discovery Exchange 5.5 Exchange 2000 or 2003 Exchange 2007

4. What Will We Cover? Administrative • Recipient management model update • Administrative permission model overview

5. Helpful Experience IT administration experience with Microsoft Exchange Server 2003, Exchange 2000 Server, or Exchange Server 5.5 Level 300

6. Agenda • Using the Exchange 2007 Toolset • New ways of working • Managing Recipients • New recipient types • Understanding Administrative Permissions • Split permission model • Delegation

7. Design Principles • Make it simple, intuitive, and organized • Enable administrative automation

8. Agenda • Using the Exchange 2007 Toolset • Managing Recipients • Understanding Administrative Permissions

9. Exchange 2007 Management Model * AD=Active Directory PowerShell Engine Exchange cmdlets Process boundary E2007 Store AD* Registry Files

10. Exchange 2007 Management Model * AD=Active Directory Command-line PowerShell Engine Exchange cmdlets Process boundary E2007 Store AD* Registry Files

11. Exchange 2007 Management Model * AD=Active Directory Graphical Command-line WinForms PowerShell data provider PowerShell Engine Exchange cmdlets Process boundary E2007 Store AD* Registry Files

12. Exchange System Manager

13. Exchange Management Console 2 Console tree 1 1 4 3 Result pane Work pane Action pane 2 3 4

14. Wizard Interface

15. Exchange Management Shell • The Shell is a powerful and flexible command-line interface • Built on command-line PowerShell technology from Windows • Extends functionality of the Exchange Management Console • Supports automation and bulk operations • Enables administrators to write secure automation scripts

16. Exchange Management Shell Continued • Object-oriented data handling • Namespaces enable groups or families of related commands • Pipelining • Access to CMD commands • Trusted scripts

17. Why Use the Shell? • One-liners • Raw mode • Whatif? • Interactive

18. Agenda • Using the Exchange 2007 Toolset • Managing Recipients • Understanding Administrative Permissions

19. Challenges • Improve poor separation between Active Directory and Exchange administration • Make implementation of split-permissions model easier

20. Mailbox Components Active Directory Exchange 2007 User John Smith Mailbox John Smith User Mailbox – John Smith

21. Challenges Continued • Automate user management • Solve Recipient Update Service problems • Admin role delegation needs to be more granular

22. What’s New • Simplified recipient provisioning • Instant-on recipients • Rich filtering support • New recipient types • Policy support for select mailbox settings

23. What’s New • Unified Messaging • New and improved client functionality • Information worker functionality

24. Explicit Recipient Types • Recipient types are now explicit versus implicit • Visual indicator • Filtering on type

25. Mailboxes • MailboxUser • SharedMailbox • LinkedMailbox • LegacyMailbox • Catch-All Mailbox

26. Resource Mailboxes • ConferenceRoomMailbox • EquipmentMailbox

27. Contacts • MailEnabledContact • MailEnabledUser

28. Distribution Groups • MailEnabledUniversalSecurityGroup • MailEnabledUniversalDistributionGroup • MailEnabledNonUniversalGroup • MailEnabledDynamicDistributionGroup

29. Recipient types Exchange 2007

30. Public Folders • Deemphasized in 2007 • Supported through the Shell • Mixed environments still use public folders

31. Rich Filtering • Server and Recipient Configuration workcenter can filter objects • Support for up to 10 expressions • Support for AND and OR

32. Recipient Scoping • Domain- and forest-wide scoping supported • Results size limited to 1,000, but can be overridden • Console uses same list of GCs and DCs used by Services

33. Pickers

34. demonstration • Locating Recipients • Work with Recipient Types • Use Filtering • Use Domain and Forest Scoping Demo

35. Enable/Disable • Enable/Disable • Adds or removes Exchange attributes from existing Active Directory objects

36. New/Remove • Creates or deletes Active Directory objects and adds or removes Exchange attributes

37. demonstration • Creating Recipients • Create and Manage Mailboxes • Create Distribution Groups and Dynamic Distribution Groups • Create Contacts • Disable or Remove Recipients Demo

38. Mailbox Management Updates • Restore mailboxes • Simplified proxy address • Advanced settings

39. Distribution Group Management Updates • Exclusive use of universal groups to avoid DL expansion problems in multidomain environments • Simplified proxy address • Advanced settings

40. Dynamic Group Management Updates • Created pre-defined filters • Simplified proxy address • Advanced settings

41. E-mail Address Policy Updates • Created pre-defined filters • Mailbox Manager functionality separated from e-mail address policies • Ability to schedule creation and application of e-mail address policies

42. E-mail Address Policy Updates Continued • RUS no longer needed • Automatic update of e-mail address policy • Advanced settings

43. Address List Updates • Created pre-defined filters • Ability to schedule creation and application of address lists • RUS no longer needed • Advanced settings

44. Offline Address List Updates • Public folder distribution optional, but still supported • New HTTP(S)-based distribution mechanism • Advanced features

45. General Recipient Management • Use Templates to Create Recipients • Secure Recipient Templates • Set storage quotas on a mailbox • Set delivery options on a mailbox • Add a new e-mail address to a mailbox • Policy support for a mailbox

46. Agenda • Using the Exchange 2007 Toolset • Managing Recipients • Understanding Administrative Permissions

47. Exchange 2003 Security and Permissions Model • Exchange Full Administrator • Exchange Administrator • Exchange View Only Administrator

48. How Things Have Changed Exchange 5.x Exchange 2007 Exchange 200x Sites Granular Admin Groups

49. Why We Made Changes • Separate Admins for Exchange and AD • A lack of granularity • Perception • No clear separation

50. New Administration Model • New administrator roles • Exchange Management Console • Exchange Management Shell