Exchange Server 2003 Drill Down: Exchange Server 2003 Drill Down Scott Calder Managing Consultant Scott.calder@cedalion.co.uk http://www.cedalion.co.uk Office: 0131 477 7741 Mobile: 07813 212869


Agenda: Agenda Mobility Security Availability Consolidation


Mobility: Mobility


Exchange Server 2003 Mobility Does any of this sound familiar ?: Exchange Server 2003 Mobility Does any of this sound familiar ?


Exchange Server 2003 Mobility The challenge of IT: Exchange Server 2003 Mobility The challenge of IT How to deliver timely information and connect the right people for faster and better quality decision making… …in a business environment where the workforce is growing more dispersed, increasing productivity is a key factor and compliancy pressure is mounting… …and at a time when technology creates new demands, security is the greatest concern and organisations must maximize IT expenditure


Exchange Server 2003 Mobility Best roaming server for Outlook: Rich/Smart device companion to Outlook Active e-mail/PIM management – preferably up-to-date WWAN – Mobile Operators Hotspots Reach device companion for Outlook E-mail triage and quick review On-line GAL and contacts lookup with one touch call Calendar and task management Highly Mobile IW Mobile Reach for IW IW Mobile Office IW Mobile On-The-Road Rich web Access companion for Outlook Best companion to Outlook Part Time “Home Office” Airport Kiosk, Internet Café Factory floor deployment Low bandwidth, latent connections Hotel Dial-up Hotspots WWAN – Mobile Operator Exchange Server 2003 Mobility Best roaming server for Outlook Outlook Web Access Outlook and Exchange Outlook Mobile Access Exchange ActiveSync (EAS)


Exchange Server 2003 Mobility Mobility Platforms: Smartphone Information consumption Primarily data viewing Integrated phone with PDA Interoperability with Exchange .NET Compact Framework ASP.NET mobile controls Exchange Server 2003 Mobility Mobility Platforms Increased Functionality Notebook PC Complex document authoring, editing and reading Keyboard centric at the desk Keyboard and mouse input methods Full .NET framework available Windows CE Windows XP Tablet PC Complex document authoring, editing and active reading Note taking and ink annotating Keyboard centric at the desk, pen & keyboard away from the desk Keyboard, mouse plus pen, ink, and speech input methods Full .NET framework preinstalled Pen, ink, handwriting and speech recognition API’s Pocket PC Phone Information consumption View and some data entry Integrated PDA with phone Interoperability with Office, Exchange and SQL Server .NET Compact Framework ASP.NET mobile controls Windows CE Smart Personal Objects One-way network Information consumption


Outlook Mobile Access (OMA)About OMA: Outlook Mobile Access (OMA) About OMA OMA enables users to use mobile device browser to access their e-mail, Contacts, Calendar, and Tasks folders. OMA can be used with most mobile devices that have a mobile browser Integrated with Exchange Easy to deploy and manage


OMA DeploymentSetup & Initial Configuration: OMA Deployment Setup & Initial Configuration OMA is installed with Exchange 2003, but OFF by default If enabled, works ‘out of the box’ in the following state Users All users are enabled for full OMA Security & Connectivity SSL for encryption and one-way authenticating the server Requires certificate for FE server Authentication Client authenticates using Basic Authentication Additional Configuration may be necessary if you want to: Enable OMA Access for ‘unsupported’ devices implement additional security measures


OMA and ActiveSync ConfigurationGlobal Settings via ESM: OMA and ActiveSync Configuration Global Settings via ESM Enable OMA for your organisation Allow/Disallow ‘unsupported’ mobile browsers to connect to the OMA vDir


User ConfigurationUser Settings via ADUC: User Configuration User Settings via ADUC Enable/Disable OMA for individual users


Outlook Web AccessFeatures: Outlook Web Access Features Zero install, HTML browser based client Premium and Basic Experience Download control for SMIME Totally new look and feel for the premium client Looks like O11 in terms of frame look. Quick flag support Viewing the Outlook search folders Preview pane on right side and two line view Mark as read/unread HTML Frame resizing Round out the feature set to make it more like Outlook Spell check (6 langs for RTM - Eng, Fre, Span, Germ, Ital, Kor) Task support (all features except delegation) Manage and create server side rules Sort and type-down Can get up to 100 messages/page in message list


Outlook Web Access & Outlook Mobile AccessDemo: Outlook Web Access & Outlook Mobile Access Demo


Exchange ActiveSyncAbout Exchange ActiveSync: Exchange ActiveSync About Exchange ActiveSync Wireless Synchronisation supported out of the box with Exchange 2003 Provides a great Outlook companion experience from devices: email, contacts, calendar Managed through Exchange System Manager and Active Directory Users and Computers Configure EAS Manage EAS users


Exchange ActiveSyncUser Experience: Exchange ActiveSync User Experience Configuration Configure settings from device or desktop Great E-mail Experience: Read, compose, and respond to mail from the mobile device. Download and view attachments Great Calendar Experience: View your up to date calendar on your device Create/Modify/Delete appointments on the device Respond to meeting requests from the device Great Contact Experience: view your Outlook contacts with your phonebook on your device Create/modify/delete contacts on the device Up To Date Device retrieves items in the background at predefined interval or as new items arrive


EAS DeploymentRequirements: EAS Deployment Requirements Exchange 2003 Mailbox and Frontend Mobile Devices Phones running Windows Mobile 2002 or 2003 software for Smartphones Windows Mobile–based PDAs using Windows Mobile 2002 or 2003 software for Pocket PC Phone Edition Other phones compatible with Exchange Server 2003 ActiveSync PalmOne recently announced support for EAS Available shortly with Treo 650 Connectivity & Security Server certificate for SSL (AES)


Mobile DeploymentExchange Mobile Access ‘Out of the Box’: Mobile Deployment Exchange Mobile Access ‘Out of the Box’ Exchange FE (EAS) Mailbox Server Mailbox Server Internet (Cellular Networks) Wireless PDA Programmable Phone HTTP (443) Smartphone Wireless PDA Smartphone Internet (802.11x - hotspots) Wireless PDA Smartphone Wireless Intranet (802.11x) HTTP (443) Corporate Network HTTP(80) HTTP(80) HTTP (443) Active Directory


Slide18: ISA Firewall Firewall Perimeter Network (DMZ) Ex2003 Front-End Wireless Network Ex2003 Back-End Servers PPC-PE, Smartphone, 3rd Party Sync (HTTP / XML) SMS Control Message New message arrives in selected sync folder Control message (GUID) is sent to mobile device via SMS Control message initiates a data synchronization session Device performs background synchronization via HTTPS, maintains up-to-date status SMTP Bridgehead Background Sync - SSL Windows 2003 or 2000 AD / GC Server Exchange ActiveSync Sync as New Items Arrive UTD notification (SMTP)


Exchange Active SyncDemo: Exchange Active Sync Demo


Security: Security


Slide21: Devices infrequently connected to an organisation’s network Low bandwidth, higher cost connections Unreliable connections Personal devices, yet managed by their employer Device loss that leads to work stoppage Mixture of business and personal applications Security Mobile Device Management and Security Challenges


Security Planning Mobile Security: Security Planning Mobile Security Perform Risk Assessment Establish Policy for: Device Password Anti-Virus Execution Control Data Protection


Security Windows Mobile Security Features: Perimeter protection Device lock: PIN, Strong, exponential delay Authentication protocols: PAP, CHAP, MS-CHAP, NTLM, TLS Data protection 128-bit Cryptographic services: CAPIv2 Code signing (SmartPhone only) Anti-virus API Network protection Device management security Microsoft ISA Server Secure Browsing: HTTP (SSL), WAP (WTLS) Virtual Private Networking (PPTP, L2TP IPSec) Wireless network protection (WEP, 802.1x, WPA) Security Windows Mobile Security Features


Security Additional Third Party Security Functionality: Security Additional Third Party Security Functionality Signature authentication Certicom Corporation Communication Intelligence Corporation TSI/Crypto-Sign VASCO Enhanced password protection Hewlett-Packard Pictograph authentication Pointsec Mobile Technologies Fingerprint authentication Biocentric Solutions Inc. HP iPAQ 5400 Card-based authentication RSA Security Certificate Authentication on a Storage Card JGUI Software Storage Encryption CREDANT Pointsec Mobile Technologies Trust Digital LLC Utimaco Safeware AG 802.1x WPA Encryption Method Funk Software S/MIME Certicom Encrypt Application Data Certicom Corporation Glück & Kanja Group Ntrū Cryptosystems, Inc. Virtual Private Networking Certicom Corporation Check Point Software Technologies Ltd. Columbitech Entrust, Inc. Epiphan Consulting Inc. Disable Applications Odyssey Software Trust Digital LLC Device Wipe Asynchrony.com Public Key Infrastructure (PKI) Certicom Corporation Diversinet Corp. Dreamsecurity Co., Ltd. Glück & Kanja Group Thin Client Technology Citrix FinTech Solutions Ltd. Microsoft


Availability: Availability


Availability and DependabilityNew Features: Availability and Dependability New Features Fast backup/recovery Volume Shadow Copy Service Recovery Storage Group Higher availability Improved Virtual Memory Management Outlook 2003 Client Performance Logging Integration with IIS 6.0 Dedicated App Mode 4 & 8 node clustering with Windows Server 2003 Security Enhancements Outlook 2003 – Exchange 2003 Kerberos Tight Windows Server 2003 Integration Trustworthy computing Secure email S/MIME (Outlook, OWA) Secure/Multipurpose Internet Mail Extensions


Microsoft Operations Manager (MOM)High Uptime, Proactive Problem Management and Rapid Resolution: Microsoft Operations Manager (MOM) High Uptime, Proactive Problem Management and Rapid Resolution Management solution for distributed systems Exchange Management Pack Out-of-box alerting and monitoring for Exchange based upon 1700 Rule Definitions All components and topologies are monitored Exchange Mailbox/Transport, AD, IIS, Outlook 2003 Available for Exchange Server 2003 More Information www.microsoft.com/exchange/mom


Slide28: Recovery Storage Group (RSG) About RSG Designed to help customers achieve most of the same benefits of the “alternate forest recovery” scenarios without having to build & maintain a recovery forest Additional Storage group available for restoration of databases Give users an immediate email dial tone service level while waiting for a database(s) to recover


Recovery Storage GroupBenefits: Recovery Storage Group Benefits Minimizes downtime without long term data loss Allows easier access to single item / mailbox restore scenarios Do not need to maintain alternate restore forest Utilize existing IT resources for restore Regional / Remote office can save on capital expenses No changes required to existing backup processes or software


Recovery Storage GroupAlternative Server Restore: Active Directory Forest Active Directory Forest Production Server Restore Server Recovery Storage Group Alternative Server Restore


Recovery Storage Group Demo: Recovery Storage Group Demo


Consolidation: Consolidation


ConsolidationScalability Improvements : Consolidation Scalability Improvements


Slide35: Consolidation Roadmap for Migration Redmond: 35 4-proc servers Backup to tape Offline restore 8 hours 800-1K users/server 50MB per user Exchange 2000 Redmond: 10 8-proc servers + SAN Backup to disk Online restore 1-2 hours/database 3K-3.5K users/server 100MB per user Worldwide: 72 physical sites 120 Mailbox Servers 215 Exchange servers 200 AD Servers Worldwide: 200 MB per user 17 physical sites 7 Regional Datacenters ES03 and Outlook 2003 30 Mailbox Servers < 100 Exchange Servers < 140 AD Servers Exchange 2003 Exchange 5.5


ConsolidationServer Consolidation for Exchange 2003 : Consolidation Server Consolidation for Exchange 2003 Server Consolidation for Exchange 2003 similar to Exchange 2000 Exchange 5.5 customers will see similar consolidation opportunities for Exchange 2000/2003 (using Outlook 2000/2002/2003) Server Consolidation Opportunities depend upon user profiles


ConsolidationSite / Network Consolidation: Consolidation Site / Network Consolidation Site Consolidation for Exchange 5.5 & 2000 customers possibilities: If using Outlook 2000/2002, no site consolidation opportunity If using Outlook 2003, it depends on: size of organisation and remote sites, quality of WAN links, Public Folder, Delegate User and Free/Busy usage, and Outlook 2003 features enabled/disabled (Cached Mode, OAB size, drizzle mode) Improved Outlook 2003 performance and cached mode provide a very good user experience Network bandwidth reduction possible using Outlook 2003 Cached Exchange Mode Assume approx 30-40% network savings End-users are shielded from network outages End-users perform local searches faster than previous clients RPC/HTTP removes requirement for RAS/VPN overhead


Questions: Questions