320 likes | 731 Views
Introduction to Hosting Exchange 2000 Jeff Strasser Support Engineer Microsoft Business Applications Microsoft Corporation What Is E-mail Hosting? Managed by a provider Outsource IT departments Purchased as a service Economical to Sell, Customize, Provision, Bill, Deploy, Operate,
E N D
Introduction to Hosting Exchange 2000Jeff StrasserSupport EngineerMicrosoft Business ApplicationsMicrosoft Corporation
What Is E-mail Hosting? • Managed by a provider • Outsource IT departments • Purchased as a service
Economical to Sell, Customize, Provision, Bill, Deploy, Operate, Quality of Business Maintain and Solution Upgrade Reliability of Operations Ease of Troubleshooting Great ISV / Service Provider customer service Standardize then Automate Everything The Application Service Provider (ASP) Challenge Hot Apps Services and Stable ServicesDelivery Platform(SSDP) TCO / TCSD Margins Great Service Levels Customer Satisfaction
What Do ASPs Gain from Exchange 2000? Drive Down Costs Increase Service Revenues • Front end / back end • Architecture • Active Directory • Active / active clustering • Partitioned data store • Messaging – storage upsell • Web store services • Document services • Unified messaging • Conferencing • Wireless notification
Developed with ASPs in Mind • Manageability • Security • High availability • Scalability
Manageability • Microsoft Management Console (MMC) • Exchange System Manager (ESM) snap-in • Microsoft® Active Directory™ users and computers snap-in • Windows Management Instrumentation (WMI) • Third-party applications
Simple Administration • Organizational Units (OUs) • Users • Groups • Security settings • Exchange rules • Other information • User Principal Names (UPNs) • Eliminates namespace collision
Tight Security • Logon authentication • Consistent user name and password • Directory security • Method of controlling the extent to which specific users can access network resources
Logon Authentication • Uses Microsoft® Windows® 2000 security • Anonymous • Basic (clear-text) • Basic with Secure Sockets Layer (SSL) • Integrated Windows Authentication (formerly NTLM)
Directory Security • Restricts what users can see in Active Directory • Users only see information regarding their own company • Custom administration tools
High Availability • Network load balancing cluster • Availability through redundancy and load distribution • Failover clustering • Allows failover to a secondary node
Scalability via Front End / Back End Front end servers BE Machine B BE Machine A Shared Storage
Flexibility of Clients • Microsoft® Outlook® 2000 • Outlook Web access • Outlook Express • Any POP3, IMAP4 clients
Designing an Exchange 2000 Architecture for Hosting • Active Directory • Storage configurations • Administrative groups • Routing groups • Public folders
Active Directory Design • Three design models • Shared Forest • Dedicated Forest • Combined Shared/Dedicated
Shared Forest Model Domain Policies Domain Security Domain Devices Domain Root Domain Users Domain Security Groups OU1 Specific Policies OU1Specific Security OU OU1 Specific Devices Company1 OU1 Specific Users OU1 Specific Security Groups OU2 Specific Policies OU2Specific Security OU OU2 Specific Devices Company2 OU2 Specific Users OU2 Specific Security Groups OU3 Specific Policies OU3Specific Security OU OU3 Specific Devices Company3 OU3 Specific Users OU3 Specific Security Groups
Combined Shared / Dedicated Place Holder Root for ASP Dedicated Dedicated Domain 1 Domain 3 Dedicated Customer 1 OU Domain 2 Shared Customer 2 OU Services Domain for ASP Customer 2 OU
Storage Group & Database Design • Storage groups • Databases MDB MDB MDB
Windows 2000 Directory Windows 2000 Directory Windows 2000 Directory Typical ASP Architecture Router / Packet Filter /Firewall Internet Outlook Client over VPN or OWA over SSL VPN server VPN server Protocol Protocol Protocol Store Store Store Store Cluster A Cluster B
Administrative Group Design Farm 1 Admin Group Farm 3 (AG) Farm 2(AG)
Routing Group Design Paris (RG) NYC Routing Group London (RG) LA (RG)
Public Folder Design • Multiple Top Level Hierarchies (TLHs) • User mailboxes associated with one PF tree • Peer level public folders • Each organization sees only its folders
Managing Exchange 2000 • Microsoft Management Console (MMC) • Exchange System Manager (ESM) • Custom tools
Managing Exchange 2000 (2) • Active Directory Services Interface (ADSI) • COM objects that represent objects in the directory • Variety of tools to interface with ADSI
Managing Exchange 2000 (3) • Windows Management Instrumentation (WMI) • Three layer model • Managed system • Provider • WMI consumer • Collaboration Data Objects (CDO) / CDOEXM • Programmatic access to management • Use in conjunction with ADSI
Other Services Instant Messaging Chat Conferencing
Instant Messaging • IM Domain • Logical collection of users and servers • IM Home Server • Virtual server that hosts IM accounts • Maintains ‘presence’ information • IM Router • Receives messages and routes to appropriate home server
Chat • Chat hosting strategies • Small companies • Community for each • Set access through access control lists (ACLs) • Large companies • Dedicated chat server • Approximately 20,000 concurrent connections/server
Conferencing • Conferencing hosting considerations • Internet latency problems • Firewall issues • Quality of service (QOS) • Guarantees bandwidth • Support for real-time multimedia • Assures time transfer of large amounts of data
AD SCO Ex SCO MAPS provisioning framework (XML abstraction) CDOEX DDNS ADSI Server apps (Exchange, SQL,etc) OS services and APIs Provisioning & Billing with MAPS ISV-developed provisioning, metering, billing, OSS frameworks
Exchange 2000 Hosting Resources • Microsoft Exchange Web site • http://www.microsoft.com/exchange/ • Microsoft Internet Services Network • http://www.microsoft.com/isn/ • Microsoft .NET Web site • http://www.microsoft.com/net/