Module 6: Managing Client Access

Overview Implementing Client Access Servers Implementing Client Access Features Implementing Outlook Web Access Introduction to Implementing Mobile Messaging

Lesson 1: Implementing Client Access Servers How Client Access Works Process for Deploying Client Access Servers What Is Network Load Balancing? Demonstration: Process for Securing Client Access Servers Discussion: Options for Securing Network Traffic Authentication Options for Client Access Servers

How Client Access Works Kerberos LDAP Kerberos LDAP 2 2 RPC 3 3 HTTPS IMAP4 POP3 HTTPS IMAP4 POP3 1 1 Domain Controller Domain Controller Client Access Server Role Client Access Server Role Mailbox Server Role Mailbox Server Role

Process for Deploying the Client Access Servers Enable POP3 or IMAP4 services, if required Configure client access settings Configure external URLs for all Client Access servers to be accessed from the Internet Configure OAB and Availability services Enable POP3 or IMAP4 services, if required Configure client access settings Configure external URLs for all Client Access servers to be accessed from the Internet Configure OAB and Availability services

What Is Network Load Balancing? Network Load Balancing is a system that increases the scalability and availability of the servers that provide access to data Other load balancing methods: Round-robin DNS Hardware-based load balancing ISA Server Round-robin DNS Hardware-based load balancing ISA Server

Demonstration: Process for Securing Client Access Server Your instructor will demonstrate how to: View SCW options Use SCW to disable Windows services Use SCW to configure Windows Firewall Apply SCW policies through Group Policy Objects (GPOs) or through a command line And will discuss options for securing Client Access servers

Discussion: Options for Securing Network Traffic Describe default network security List the options for securing network traffic Describe how SSL works Describe default network security List the options for securing network traffic Describe how SSL works

Authentication Options for Client Access Servers Authentication options include: Standard authentication options  Basic authentication  Digest authentication  Integrated Windows authentication Forms-based authentication Forms-based authentication cookies Standard authentication options  Basic authentication  Digest authentication  Integrated Windows authentication Forms-based authentication Forms-based authentication cookies

Practice: Implementing Client Access Servers In this practice, you will configure Client Access server settings

Lesson 2: Implementing Client Access Features What Is Outlook Anywhere? Process for Configuring Outlook Anywhere What Is Autodiscover? Demonstration: Process for Implementing Autodiscover What Is the New Calendaring Functionality? What Is Availability Service? Demonstration: How to Configure the Out-of-Office Features Offline Address Book Distribution Configuration

What Is Outlook Anywhere? Mailbox server Client Access server Outlook 2003 or Outlook 2007 client Global catalog servers Client Access server extracts the RPC request and forwards it to the Exchange server using ports 6001, 6002, 6004 Outlook 2003 client opens HTTPS sessions to the Client Access server Back-end servers forward directory lookup requests to global catalog servers Outlook Anywhere enables RPC connections over HTTPS to an Exchange Server 2007 server

Process for Configuring Outlook Anywhere To configure Exchange Server 2007 for Outlook Anywhere: Configure a computer running Windows Server 2003 for RPC proxy Configure Outlook Anywhere in the Exchange Management Console Install a certificate for SSL on the RPC proxy server Configure a profile for Outlook 2007 or Outlook 2003 to use RPC over HTTP Configure a computer running Windows Server 2003 for RPC proxy Configure Outlook Anywhere in the Exchange Management Console Install a certificate for SSL on the RPC proxy server Configure a profile for Outlook 2007 or Outlook 2003 to use RPC over HTTP The RPC proxy server should be the Client Access server

What Is Autodiscover? Autodiscover provides information used to configure Outlook 2007 client profiles Outlook 2007 Autodiscover Process: The client locates the Autodiscover service The Autodiscover service on the client sends each Client Access server an HTTP Post command The appropriate Client Access server responds by returning an XML file Outlook downloads the required configuration information from the Autodiscover service The client locates the Autodiscover service The Autodiscover service on the client sends each Client Access server an HTTP Post command The appropriate Client Access server responds by returning an XML file Outlook downloads the required configuration information from the Autodiscover service

Demonstration: Process for Implementing Autodiscover Your instructor will demonstrate how to implement and configure Autodiscover And will discuss when to implement Autodiscover

What Is the New Calendaring Functionality ? The new calendaring functionality includes the: Calendar Attendant Scheduling Assistant Resource Booking Attendant Calendar Attendant Scheduling Assistant Resource Booking Attendant The new calendaring functionality is a collection of components in Exchange Server 2007 that performs calendar management functions

What Is Availability Service? Availability service makes free/busy information available for Outlook 2007 and Outlook Web Access clients and other clients Exchange Server 2007 Exchange Server 2007 Exchange Server 2007 Exchange Server 2007 Exchange Server 2003 Exchange Server

Demonstration: How to Configure Out-of-Office Features Your instructor will demonstrate how to configure the user and administrator options for out-of-office messages And will discuss: Why you would use each different type of message Security concerns for sending out of office messages over the Internet

Offline Address Book Distribution Configuration An OAB virtual directory is created on each Client Access server The OAB is copied from the Mailbox server by the Microsoft Exchange File Distribution service Outlook 2007 uses Autodiscover to find the distribution point and use HTTP and BITS to download the files An OAB virtual directory is created on each Client Access server The OAB is copied from the Mailbox server by the Microsoft Exchange File Distribution service Outlook 2007 uses Autodiscover to find the distribution point and use HTTP and BITS to download the files To configure OAB distribution: Enable Web-based distribution for the OAB Configure the OAB object properties Enable Web-based distribution for the OAB Configure the OAB object properties

Practice: Implementing Client Access Features In this practice, you will: Configure Outlook Anywhere Configure Autodiscover Configure the out-of-office features and address book distribution

Lesson 3: Implementing Outlook Web Access Discussion: What Is Outlook Web Access ? Demonstration: How to Manage Outlook Web Access What Is Windows SharePoint Services and Windows Files Shares Integration ? Demonstration: Windows SharePoint Services and Windows Files Shares Integration Options Outlook Web Access Virtual Directories

Discussion: What Is Outlook Web Access? Read the discussion questions Discuss the questions with the class Read the discussion questions Discuss the questions with the class

Demonstration: How to Manage Outlook Web Access Your instructor will demonstrate how to: Configure the server to require SSL Configure the OWA virtual directories Modify the attachment handling settings Configure gzip compression settings Configure segmentation settings And will discuss how these settings are used

What Is Windows SharePoint Services and Windows Files Shares Integration? The Client Access server relays client requests Users can browse document libraries, file shares, and save locations as Internet Explorer favorites Users can view or download files Only users with Exchange Server 2007 mailboxes can use Windows SharePoint Services and Windows Files Shares Integration The Client Access server relays client requests Users can browse document libraries, file shares, and save locations as Internet Explorer favorites Users can view or download files Only users with Exchange Server 2007 mailboxes can use Windows SharePoint Services and Windows Files Shares Integration Windows SharePoint Services and Windows Files Shares Integration provides read access to documents in Windows SharePoint Services document libraries or in Windows file shares

Demonstration: Windows SharePoint Services and Windows Files Shares Integration Options Your instructor will demonstrate how to: Configure settings for public and private computers Access file shares, document libraries, or both Access files through WebReady Document Viewing Configure direct access file settings to allow, block or force users to save specified types of files Determine which servers on the internal network are accessible And will discuss the security risks with LinkAccess

Outlook Web Access Virtual Directories Virtual directory Description OWA Accessed by users whose mailboxes are located on Exchange Server 2007 Mailbox servers Exchange Accessed by users whose mailboxes are located on Exchange Server 2003 or Exchange 2000 Server back-end servers Public Points to public folders on Exchange Server 2003 or Exchange 2000 Server computers Exchweb Used to access the previous OWA virtual directories

Lesson 4: Introduction to Implementing Mobile Messaging How Exchange ActiveSync Works Demonstration: How to Implement Exchange ActiveSync Mobile Device Management

How Exchange ActiveSync Works Mailbox server Client Access server Exchange ActiveSync client Mailbox server Client Access server

Demonstration: How to Implement Exchange ActiveSync Your instructor will demonstrate how to: Configure the Exchange ActiveSync directory Configure Exchange ActiveSync mailbox policies Configure user accounts for Exchange ActiveSync And will discuss implementing mobile access in your organizations

Mobile Device Management Are susceptible to getting lost or stolen May contain highly confidential data Are susceptible to getting lost or stolen May contain highly confidential data Difficult to manage because devices: Rarely or never connect to the internal network Do not require computer accounts in Active Directory Rarely or never connect to the internal network Do not require computer accounts in Active Directory Exchange ActiveSync policies provide some security Use Exchange Management Console or Exchange Management Shell to manage devices Difficult to secure because mobile clients:

Lab: Managing Client Access Exercise 1: Managing Mobile Device Connectivity Exercise 2: Managing Outlook Web Access

Day 2: Summary What was most valuable to you in today’s session? Have you changed your mind about anything based on today’s session? Are you planning to do anything differently on the job based on what you learned in today’s session? If so, what?