Exchange Administration rights

A new Exchange version means a new way of handling the permissions?

Exchange 2003:

- Exchange Full Administrator
- Exchange Administrator
- Exchange View Only Administrator

Exchange 2007:

- Exchange Organization Administrators
- Exchange Recipient Administrators
- Exchange View-Only Administrators
- Exchange Public Folder Administrators (new in Exchange 2007 SP1)

Exchange 2010:

We have RBAC (Role Based Access Control) a more sophisticated way of delegating granular access to specific groups of users.
This means that we can now easily control which users can manage what on whom?

- Management Role – Exchange Security Group that you create.  Help Desk Tier 1, Help Desk Tier 2, Admin Tier 1, Admin Tier 2, etc…
- Management Role Entries – What each Management Role has access to.  What cmdlets can these Management Roles use?
- Management Role Assignments – What Security Group and/or user is a Management Role assigned to?
- Management Role Scopes – What target of users, OUs, servers, filtered objects, etc. do these management roles have access to adminster?

Troubleshooting DNS in Active Directory

Exchange and other Microsoft based servers and of course Active Directory are heavily based upon a proper configured DNS.

Required DNS Records:
- SRV – (Pdc), One per domain
- SRV – (GC), At least one per forest
- A – (GcIpAddress), At least one per forest
- CNAME – (DsACname), One per domain controller
- SRV – (Kdc), At least one per domain
- SRV – (Dc), At least one per domain
- A, One per domain controller

Netlogon Events that indicate DNS problems:
ID5774
Troubleshoot domain controller locator DNS records registration failure.

ID5775
Troubleshoot domain controller locator DNS records registration failure.

ID5781
Troubleshoot domain controller locator DNS records registration failure.

ID5783
If the source server could not locate the server in DNS, troubleshoot Active Directory replication failure due to incorrect DNS settings. This could also be a RPC problem.

Testing:
# dcdiag /test:registerindns /dnsdomain

# dcdiag /test:connectivity

Unattended Exchange 2010 installation on Windows Server 2008 R2

This guide will help you do an unattended installation of the typical Exchange roles.

Network Pre-Requirements

1. Disable Chimney
# netsh int tcp set global chimney=disabled

2. Disable IPv6
Edit the registry using regedit:

Browse to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters

Add a new D-Word (32-bit value) of ffffffff

Operatingsystem Components

1. Use the ServerManagerCmd cmdlet in the Exchange media folder to install the required Windows fetures and roles:
# ServerManagerCmd –ip Exchange-Typical.xml

Typical = Client Access, Hub Transport and Mailbox Windows requirements

Exchange 2010 Requirements

1. Prepare the Environment
# setup.com /PrepareLegacyExchangePermissions

2. Prepare Schema
# setup.com /PrepareSchema

3. Prepare AD
# setup.com /PrepareAD

4. Prepare Domains
# setup.com /PrepareDomain

Other requirements

1. Start and set NetTcpPortSharing Service to Automatic
# Set-Service NetTcpPortSharing -StartupType Automatic

2. Download and install Office 2007 filterpack (x64)
http://www.microsoft.com/downloads/details.aspx?FamilyId=60C92A37-719C-4077-B5C6-CAC34F4227CC&displaylang=en

Install Exchange

1. This will install the Exchange roles Client Access, Hub Transport and Mailbox to the folder D:\Program Files\Microsoft\Exchange Server
# setup.com /m:install /role:C, H, M /TargetDir:”D:\Program Files\Microsoft\Exchange Server”

Turn off client encryption on Exchange 2010

This is how you turn this feature off:

# Set-RpcClientAccess –Server <CASServerName> –EncryptionRequired $False

Office Professional Plus 2010 Beta released!

Yes thats right folks, the beta has been released on MSDN.

https://msdn.microsoft.com/en-us/subscriptions/securedownloads/default.aspx

My Archlinux screenshot of November 2009

http://img265.imageshack.us/i/screenql.png/

Exchange Server 2010 Certified!

This morning I passed the exam 70-622 TS: Exchange Server 2010 Configuring! Hurray!

How to add local storage in XenServer 5.5

Just testing XenServer 5.5 at home and noticed that I had not added my second harddrive during the installation process.

This is how I managed to add the disk to the XenServer system:

1. Open up the Terminal
2. See what disks that are currently available:
# fdisk -l

sda is the first harddrive, sdb is the second sdc is the third and so forth…

3. Now check what ID the harddrive has:
# cd /dev/disk/by-id/

4. List the disks:
# ls

5. Add the disk to the system:
# xe sr-create type=lvm content-type=user device-config:device=/dev/disk/by-id/scsi-SATA_SAMSUNG_XXXXXXX name-label=”My Archive”

scsi-SATA_SAMSUNG_XXXXXXX is the name of the disk you listed in step 4.
My Archive is the name of the new storage.