Posts

Exchange 2007-2010: Brief Overview of Changes

 

Exchange 2007

– Routing groups are tied with Active Directory sites and services

– Replication is done using Active Directory replicattion

– Bridgehead server role was eliminated and replaced with the Hub Transport seerver

– Outlook Web Access (OWA) was dramatically improved to similar to 32-bit version of Outlook

– Direct file access (Access shares on servers through OWA)

– OWA provides access to mailbox rules, out-of-office rules, provisioning of Mobile devices, access to digital rights managed content

– LCR – two databases replicated on separate drives on the same server

– CCR – users mailbox replication across servers and sites (fail-over and fail-back capabilities)

 

Exchange 2007 SP1

– Public folders available in OWA

– Standby Continuous Replication (SCR) allowed for offsite, over-the-wan replication of databases with 20 minute replication delays.

– Geo-cluster is possible for remote CCR

 

Exchange 2010

– Server Licensing

– Standard supports 5 database stores

– Enterprise supports up to 150 stores

– User Licensing (non-relating/exclusive to server licensing)

– Enterprise license provides unified messaging, per-user journaling for compliance support, and use of Exchange Server hosted services for message filtering

– No more Recovery Storage Groups (RSG)

– No more STM databases

– OWA enhanced features available to other browsers

– Database Availability Group (DAG, Basically CCR, No more LCR, CCR, SCR)

– Remote execution of EMS commands

Grant Full mailbox access to Domain Admins and Enterprise Admins in Exchange 2003

One would assume that administrators (Domain Admins and Enterprise Admins) would be allowed to fully control user mailboxes. Unfortunately, this presumption is shown to be incorrect when admins try to add additional mailboxes to their Outlook client. Of course, you can always manually set permissions on a per mailbox basis, but that defeats the purpose of global mailbox management. The cause is due to Microsoft deciding to globally set Deny permissions to Full Mailbox Access (Send As / Receive As) and hide the security tab in which one could edit these permission settings in Exchange System Manager. Fortunately, there is a simple registry fix for this problem.

1.Run regedit

1.Click Start, point to Run, and then type regedit.

2.Add registry key ShowSecurityPage

1.Go to HKEY_Current_UserSoftwareExchangeExAdmin

2.Once you reach the above section of the registry you need to create a DWORD called ShowSecurityPage.

3.A value of 1 (Numeric one) means on (show security tab), whilst 0 (Zero) means off.

4.Close the registry editor.

5.Close the Exchange System Manger, then reopen (no need for a reboot)

6.Right click on YourOrganization (Exchange), then click Properties.

7.Click the Security tab, then highlight the Domain Admins group.

8.Scroll down the permissions list and uncheck Deny for Send As and Receive As

9.Repeat the above step for the Enterprise Admins group.