Module 3:

Administering Microsoft
Exchange 2000
Overview

 Introduction to the Administrative

Utilities
 Introduction to Exchange System
Manager
 Managing Administrative Security
 Creating and Configuring
Administrative Groups
 Using Exchange 2000 System Policies
 Administering Exchange 2000 Address
Lists
Introduction to Administrative
Utilities

Adsiedit.exe Ldp.exe

Administrative Utilities

Exchange
Active Directory System
Schema Manager
Introduction to Exchange System
Manager

 Exchange System Manager

 Organization Object Properties
 The Top-Level Containers
Exchange System Manager

Exchange
System Active
Manager Directory

Administrator Domain Controller

Organization Object Properties

Organization Object Properties

General Displays general properties including
routing groups and administrative
groups

Details Displays details such as the date of

creation and last modification

Security Lists the users and groups that can

access the Organization object
along with the permissions
Top-Level Containers

Organization

Global Settings
Recipients
Administrative Groups

Servers
System Policies

Connectors
Tools
Managing Administrative Security

 Types of Permissions
 Permission Inheritance
 Delegating Permissions to
Administrators
 Scope of Permissions
 Delegating Permissions Manually
 Permissions Required for
Administrative Tasks
Types of Permissions

Standard Extended
Permissions Permissions
 Full control  Add PF to admin
 Read group
 Write  Create public folder
 Delete  Open mail send
 Read permissions queue
 Change permissions  Read metabase
 Take ownership properties
 Create children
 Administer
information store
 Delete children
 View information
 List contents
store status
 Read properties  Receive As
 Write properties  Send As
 List objects
Permission Inheritance

Organization

Permissions
Propagates Recipients
Delegating Permissions to
Administrators

Permissions
Exchange Administration Delegation Wiza
Users or Groups
Select one or more users or groups to whom you wan to
Applied using the Exchange delegate control.

Administration Delegation WizardUsers

Groups
or

NWTRADERS1\DHCP…Exchange Admi…
NWTRADERS1\Cert P… Exchange View Only A…
Scope of Permissions

Types of Roles:

Full Administrator

Exchange Administrator

View Only Administrator

Delegating Permissions Manually

Permissions First Administrative Group Properties

Gener Detail Secur
al s
ity
Applied Manually Users or
Groups Add..

DHCP Users (TWTRADERS1\DHCP Users)

Remove

Domain Admins (NWTRADERS1\Domain Ad…

List object
Add PF to admin group
Create public folder
Create top level public folder
Advanced

OK Cancel Apply Help

Permissions Required for
Administrative Tasks

To Perform a Task, an Administrator

May Require:

Specific Permissions in Exchange 2000

Specific Windows 2000 Group Membership

Lab A: Creating a Mail-enabled User
Account
Creating and Configuring
Administrative Groups

 Administrative Group Design

Considerations
 Creating Administrative Groups
 Securing Administrative Groups
Administrative Group Design
Considerations
Single Admin Group General Admin Group

Routing
Groups Servers
Folders Servers

Routing
Groups
System
Policies Folders Policy Admin Group

System
Policies
Creating Administrative Groups

Administrative Groups
New Administrative Group…
First Administrative Group
View
New Window from here

Refresh
Export List

Help
 Securing Administrative Groups

Enterprise Exchange – Exchange

Exchange Organization Object
Admins Security Group Full Administrator

Seattle Admins – Exchange View Administrative Groups

Security Group Only Administrator
Paris Admins – Exchange View
Security Group Only Administrator
...
Seattle Administrative Grou

Seattle Admins – Exchange Full

...
Security Group Administrator
Paris Admins – Denied
Paris Administrative Group
Security Group

Seattle Admins – Denied

Security Group
Paris Admins – Exchange Full
Security Group Administrator
Lab B: Setting Security on
Administrative Groups
Using Exchange 2000 System
Policies

 Securing System Policy Configuration

 Creating and Applying Policies
 Securing System Policy
Configuration
ADSI Edit Routing
Groups

CN=nwtraders
CN=Administrative Group Servers Folders
CN=First Administrative Group
First
Allow Deny Administrative
Group
Exchange Create Exchange Policies Objects
Delete Exchange Policies Objects
Administrators
Security Group System Policy
CN=System Policy Administrative Group Administrative
Allow Deny Group
Create Exchange Policies Objects
Exchange
Delete Exchange Policies Objects
System Policy
Administrators System
Security Group Policies
Creating and Applying Policies
General User
50 MB Mailbox Store
Mailbox Limit

Power User
100 MB
Mailbox Store
Mailbox Limit

London Server

Enable
Message
Tracking
Paris Server
 Administering Exchange 2000
Address Lists

 Introduction to Address Lists

 Creating Address Lists
 Managing Address Lists
 Recipient Update Service
Introduction to Address Lists

Types of Address Lists:

Consists of the address lists created

Default Address Lists by default when you install Exchange
2000

Consists of address lists that you

Custom Address Lists create based on fields of recipient
objects

Consists of local copies of address

Offline Address Lists lists that users download to their
computers
Creating Address Lists

Filter Rule

Find: Exchange Recipients

General Storage Advanced

Field Condition: Value:

Department Is (exactly) Marketing

Add Remove

Department Is (exactly) Marketing

LDAP Query
(&(objectClass=*)(department=Marketing))
Managing Address Lists

Modify Full Name Auto-Generation of Display Names

Secure Address Lists

Identify Which Address List Will Appear

Hide Address Lists

Recipient Update Service

a t es?
Upd
Active
Directory

Recipient Update Upda

ted!
Service

Address
Lists
Lab C: Managing an Address List in
Exchange 2000
Review

 Introduction to the Administrative

Utilities
 Introduction to Exchange System
Manager
 Managing Administrative Security
 Creating and Configuring
Administrative Groups
 Using Exchange 2000 System Policies
 Administering Exchange 2000 Address
Lists