Author: Ward

Rollup 7 voor Microsoft Exchange 2007 SP1

Update 7 voor Microsoft Exchange 2007 is vrij gegeven. Downloaden doen je HIER.
 
Deze update heeft 50 updates. Aangezien microsoft een nieuwe manier van testen/controleren van updates heeft is men niet gelukt om alles opgelost te krijgen met
Roll-Up 6.

Beschrijving van deze update check: KB 960384

  • 946449 A non-read report message is sent after you perform a "Mark All as Read" operation against unread e-mail messages in Exchange Server 2007
  • 949113 Unexpected modified instances of a recurring meeting may appear when you use Entourage to access a calendar on a computer that is running Exchange Server 2007
  • 949114 Duplicate calendar items may appear when you use Entourage to access a calendar on an Exchange 2007 server
  • 949464 The customized properties are removed in the recipients’ calendars when you send a meeting request that includes customized properties
  • 950115 When a CDO 1.2.1-based application generates a meeting request that includes some European characters in the message body, these characters appear as question marks in Exchange 2007
  • 951341 Users cannot read calendar items when they connect Exchange Server 2007 by using certain IMAP4 or POP3 clients
  • 952778 Event ID 9874 is frequently logged on Exchange Server 2007 with Service Pack 1
  • 953094 The value in the "Messages queued for submission" performance counter on the mailbox role of Exchange Server 2007 increases after a meeting request is delivered
  • 954213 All Test commands that are related to the Client Access Server fail when you run the commands on an Exchange 2007 server in a disjoint namespace
  • 954741 The UseRUSServer parameter does not work if an administrator has specified an RUS server on a target mailbox server
  • 954898 The LegacyExchangeDN attributes for mail-enabled objects are incorrectly set in an environment that contains Exchange 2003 and Exchange 2007
  • 955027 The Edgetransport.exe process may crash on a hub transport server that is running Exchange Server 2007 Service Pack 1
  • 955462 You notice high CPU usage when the IMAP service is running on an Exchange 2007 Service Pack 1 server that has the CAS role
  • 955778 You receive a Non-Delivery Report (NDR) message when you send an e-mail message to a non-SMTP address in an Outlook client that is using Cached mode
  • 956069 A Non-Delivery Report (NDR) is generated when an Exchange Server 2007 user tries to send a message to a recipient who has a one-off FAX address that includes any characters that are larger than 0xFF in Unicode
  • 956205 Corrupted characters appear in the Subject field or in the Location field of a recurring calendar item after a user adds DBCS characters to a field in a meeting occurrence by using an Outlook 2002 client
  • 956275 An Exchange 2007 sender’s address is split into two separate addresses when an external recipient replies to the message
  • 956455 The display name appears in a received message even though the property of the user mailbox is set to "Hide from Exchange address lists" in Exchange Server 2007
  • 956687 Messages stay in the submission queue after you enable per-mailbox database journaling in an Exchange Server 2003 and Exchange Server 2007 coexisting environment
  • 957019 Images cannot be pasted in an Exchange Server 2007 Outlook Web Access message body
  • 957071 The MSExchange Transport service may crash intermittently on the Exchange 2007 server
  • 957124 You do not receive an NDR message even though your meeting request cannot be sent successfully to a recipient
  • 957227 The Exchange Management Console crashes when one or more domain controllers of a top-level domain are not reachable
  • 957485 The Test-OwaConnectivity command returns a warning message in Exchange Server 2007 when there is a disjoint namespace
  • 957504 The IMAP4 service crashes intermittently, and Event ID 4999 is logged on Exchange Server 2007
  • 957683 An IP Gateway can still be used to dial out for a "Play on Phone" request after the IP Gateway is disabled
  • 957834 Network shares are deleted and created intermittently by the replication service on an Exchange SCC cluster when SCR is enabled on the Exchange server
  • 957947 The Exchange Information Store service may crash when an Entourage client synchronizes with an Exchange 2007 server
  • 958091 You cannot update the task complete percentage to any value other than 0 or 100 in Outlook Web Access
  • 958093 Voice mail messages are not stamped with the disclaimer that is defined in the transport rule in an Exchange Server 2007 environment
  • 958128 Replication messages stay in a queue in a retry state after a public folder database is dismounted
  • 958331 The Restore-StorageGroupCopy command may fail in an Exchange Server 2007 SCR environment
  • 958444 Event 522 is logged when replication is resumed on a suspended Storage Group on an Exchange Server 2007 CCR or SCR environment
  • 958472 An unexpected text string appears at the top of the message body when an Exchange Server 2007 user sends an HTML message by using Outlook Web Access
  • 958552 The ByteEncoderTypeFor7BitCharsets setting does not take effect for the US ASCII character set after you install the hotfix that is mentioned in Microsoft Knowledge Base article 946641
  • 958638 Exchange 2007 Server cannot parse X-Priority headers from clients that submit X-Priority headers that contain additional comments
  • 958803 The EdgeTransport.exe process may stop responding in Exchange Server 2007 when the priority queuing feature is enabled
  • 958872 The Map This Address feature in the contact page for an OWA client does not work in Exchange Server 2007
  • 959100 Exchange Server 2007 cannot route e-mail messages to mail enabled Non-MAPI public folders that are hosted on an Exchange Server 2003 server
  • 959135 Event 9673 occurs when the Microsoft Exchange Information Store service crashes on a computer that is running Exchange 2007 with Service Pack 1
  • 959397 An increase in database size is generated unexpectedly when IMAP4 users use a Copy command in Exchange 2007
  • 959434 The last logon time is not updated to reflect the logon times that have occurred after users log on to their mailboxes by using the Entourage client in an Exchange 2007 environment
  • 959545 A redirection message in Outlook Web Access 2007 is incorrect when the message is translated to Korean
  • 959671 The Manage Mobile Devices option is not displayed in Exchange Management Console after a mobile device re-synchronizes with an Exchange 2007 server
  • 959952 The Set-Mailbox command does not change the AutomateProcessing attribute for an Exchange Server 2007 user when a regular user mailbox is converted from a room mailbox
  • 960291 Outlook Web Access or an Exchange Web Service application does not correctly display a monthly or yearly recurring appointment or meeting request
  • 960292 The MSExchangeIMAP4 service may crash intermittently after you apply an update rollup for Exchange Server 2007 Service Pack 1
  • 960349 The Exchange Information Store service may crash after you enable tracing for the logon actions
  • 961281 An error is returned when you enable SCR from any source in a child domain after you install Exchange Server 2007 Service Pack 1 Rollup 5
  • 961395 The Exchange 2007 Unified Messaging server does not update the caller information if an external user makes a call

Exchange 2007 Server Installatie Handleiding Updates

Server Installatie Unattend Installatie van Exchange 2007

Microsoft heeft de handleidingen voor Installatie van Exchange 2007 aangepast en er is zelfs een nieuwe artikel bijgekomen: Installation Guide Template – Cluster Continuous Replication (Windows 2008)

De volgende dingen zijn aangepast aan de Transport Installatie Handleidingen
– Hoe de tijdelijke Storage Path aan te passen.
– Hoe je database cache grootte kunt aanpassen als je 4GB of meer geheugen voor de  
  Exchange server beschikbaar is.
– Hoe je optionele ESE performance punten kunt toevoegen.

De lijst met aanbevelen hot-fixen is bijgewerkt.
Het tunen van virtueel geheugen is ook bijgewerkt.

Voor Windows Server 2008 systemen:

Exchange 2007 & Outlook 2007 Beschikbaarheids Informatie Aanpassen

Wat basis informatie over beschikbaarheid informatie in Exchange 2007…

Autodiscover helpt Outlook 2007 om diverse web services zoals beschikbaarheids services,
, Unified Messaging, Offline Address Book en de Free/Busy informatie voor Outlook 2007 / OWA 2007.

Nieuwe beschikbaarheids rechten in Outlook 2007.

Outlook heeft nieuwe beschikbaarheid rechten waarmee beperkte of volledige beschikbaarheid wordt weer gegeven.

Nieuwe Rechten

1. Open Outlook 2007

2. Eigenschappen van Agenda

3. Tabblad Machtigingen

4.  
  beschikbaarheidsinformatie
5. 
– Geen
– Beschikbaarheidsinfo
– Beschikbaarheidsinfo, Locatie, Info
– Volledige Gegevens

Hier kan de gebruikers zijn of haar beschikbaars info aanpassen voor overige gebruikers.
De rechten worden opgeslagen in zijn of haar mailbox.  

Script om Application Templates voor Windows SharePoint Services 3.0 te installeren

Microsoft een een 40 tal templates beschikbaar gesteld voor Windows Sharepoint Services 3.0
http://technet.microsoft.com/en-us/windowsserver/sharepoint/bb407286.aspx

Microsoft levert voor deze templates geen installatie op.

De installatie gebeurd via de command prompt.
Installing application templates for Windows SharePoint Services 3.0

Rob Pellicaan heeft hier voor een mooi script inelkaar gezet die alle templates achter elkaar netjes importeerd.

Het script: (Opslaan als .cmd)

set cmmand="C:\Program Files\Common Files\Microsoft Shared\web server extensions\12\BIN\stsadm.exe"

%cmmand% -o addsolution -filename ApplicationTemplateCore.wsp
%cmmand% -o deploysolution -name ApplicationTemplateCore.wsp -allowgacdeployment -local
%cmmand% -o copyappbincontent

for /F %%i in (‘dir /b *.wsp’) do %cmmand% -o addsolution -filename %%i
for /F %%i in (‘dir /b *.wsp’) do %cmmand% -o deploysolution -name %%i -allowgacdeployment –local

Importeren & Exporteren DHCP Reserveringen Windows 2003 Server

Exporteren DHCP Reserveringen

netsh dhcp server [ip address] scope [scope address] dump>C:\dhcpreserveringen.txt

Open dhcpreserveringen.txt doe een zoek & vervang van de bron IP  vervang het IP van door van de server waar hij geïmporteerd moet worden. Controleer of de scope ook nog goed is.
Verwijder alles wat overbodig is.

Zorg er voor de op de server waar je het wilt importeren dat de scope is aangemaakt.

netsh exec C:\dhcpreserveringen.txt

Zorg wel ervoor dat alle reserveringen op alle dhcp servers het zelfde zijn.

Microsoft Artikelen:
How to use the Netsh utility to export and import DHCP scopes

Create a Self-Signed Certificate using SSL Diagnostics Tool

Handige tooltje om snel en simpel een Self-Signed Certificate te maken: SSL Diagnostics . Download setup.exe
http://www.microsoft.com/downloads/details.aspx?familyid=CABEA1D0-5A10-41BC-83D4-06C814265282&displaylang=en

Installeer het tooltje en start het programmatje op. In het hoofd scherm van SSL Diagnostics, rechter muis knop op Website naam (IIS moet wel draaien) (Te zien bij W3SVC/<site naam>), en klik op Create New Cert.

clip_image002

Handige Trukjes van Makecert.exe om te weten

Creating X.509 Certificates using makecert.exe

Creating x.509  certificates is a very common task. Unfortunately the knowledge how to do it is quite rare. If you want a certificate that the whole world would trust you need to buy one, but if you need it for your own use you can create it using a tool called MakeCert.exe

After downloading the tool you have to perform the following procedure:

Creating a Root Certificate Authority

makecert.exe -n "CN=My Root CA,O=Organization,OU=Org Unit,L=San Diego,S=CA,C=US" -pe -ss my -sr LocalMachine -sky exchange -m 96 -a sha1 -len 2048 -r My_Root_CA.cer

Import Root Certificate Authority Certificate into Trusted Root Store

certutil.exe -f -addstore Root My_Root_CA.cer

Create Backup (Export) PFX file of Root Certificate Authority Certificate

certutil.exe -privatekey -exportpfx "My Root CA" My_Root_CA.pfx

Create a Server Certificate issued from the previously created Certificate Authority

makecert.exe -n "CN=Server" -pe -ss my -sr LocalMachine -sky exchange -m 96 -in "My Root CA" -is my -ir LocalMachine -a sha1 -eku 1.3.6.1.5.5.7.3.1,1.3.6.1.5.5.7.3.2 Server.cer

Create Backup (Export) PFX file of Server Certificate

certutil.exe -privatekey -exportpfx "Server" Server.pfx

Create a Computer certificate issued from the previously created Certificate Authority

makecert.exe -n "CN=Computer" -pe -ss my -sr Localmachine -sky exchange -m 96 -in "My Root CA" -is my -ir LocalMachine -a sha1 -eku 1.3.6.1.5.5.7.3.2 Computer.cer

Create Backup (Export) PFX file of Computer Certificate

certutil.exe -privatekey -exportpfx "Computer" Computer.pfx

OID Reference

Encrypting File System (1.3.6.1.4.1.311.10.3.4)

Secure Email (1.3.6.1.5.5.7.3.4)

Smart Card Logon (1.3.6.1.4.1.311.20.2.2)

Client Authentication (1.3.6.1.5.5.7.3.2)

Server Authentication (1.3.6.1.5.5.7.3.1)

IP security IKE intermediate (1.3.6.1.5.5.8.2.2)

Creating a Self-Signed SSL Certificate met MakeCert.exe

Waar vind je certificaten op je PC

Ik begin even met de basis Als u toepassingen gaat ontwikkelen die certificaten vereisen, zult u moeten weten waar de certificaten worden opgeslagen, evenals hoe te om de beheersinterface te navigeren. Er is een MMC (Microsoft Management Console) op elke pc aanwezig. Vanuit deze management console kunt u certificaten beheren. Certificaten kunnen opgeslagen worden worden onder Gebruikers Account of op de lokale Machine Opslag.

Voer de volgende stappen uit om Certificaten te laden uit de lokale computer account. Certificaten Management Console Openen.

1. Start à Uitvoeren

2. MMC

3. Bestand à Module Toevoegen / Verwijderen

4. Toevoegen

5. Certificaten

6. Computeraccount

7. De lokale PC waar deze wordt op uitgevoerd. à Voltooien

8. Sluiten à Ok
clip_image002

Je kunt de certificaten management console opslaan. Dit doe je op de volgende manier.
Bestand à Opslaan Als à Noem het certificaten.msc.

Sla het bestand bijvoorbeeld op je Desktop.

Als je Certificaten uit klikt (Lokale Gebruiker, Lokale Computer). Dan zie je certificaten opslagen

Personal. Here you store certificates for which you have the associated private key.

Trusted Root Certification Authorities. This store lists the Third-Party Root Certification Authorities (Thawte, Verisign, etc.), Microsoft root certificates, and your own root certificates for self-signed certificates.

Trusted People. Here you place your trusted certificates (you must also trust the entire chain of certificates).

Hoe kan ik mijn eigen test ssl certificaten aan maken voor websites of voor overige web diensten om het te beveiliging.

Dit is de meest gevraagde vraag die ik heb gehoord. Het is niet altijd gemakkelijk om een beknopte lijst van stappen te vinden om voor het creëren van certificaten te volgen. Er zijn drie populaire benaderingen van het produceren van certificaten voor testende doeleinden:

1.     Vraag een testcertificaat bij een certificaatgezag (CA), zoals Verisign. Deze zijn meestal 90 dagen geldig.

2.     Verstrek CA. uw eigen certificaten van uw Server 2003 Certificaat Server.
http://www.petri.co.il/install_windows_server_2003_ca.htm
http://www.petri.co.il/obtain_digital_certificate_from_online_ca.htm

3.     Produceer certificaten gebruikend makecert.exe.
4. Maak een Self-Signed Certificate gebruik makend van de SSL Diagnostics Tool

Het makkelijkste is makecert.exe te gebruiken. Dit hulpmiddel wordt geïnstalleerd tijdens de installatie van .NET Framework SDK (2.0 en 3.0 beide bevat makecert.exe).

MSDN verteld hoe u certificaat kunt maken (zie http://msdn2.microsoft.com/en-us/library/bfsktky3.aspx).


Het creëren van een SSL Certificaat

Om een Self-Signed SSL Certificate te creëren kunt u het volgende commando makecert.exe gebruiken.

makecert -r -pe -n "CN=www.wardvissers.nl" -b 01/01/2000 -e 01/12/2036 -eku 1.3.6.1.5.5.7.3.1 -ss my -sr localMachine -sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12 c:localhost.cer

The subject name “localhost” makes it possible to browse without errors to http://localhost or any path relative to it. The subject name of the SSL certificate must match the domain or machine name used in the path to access the site. If you used your machine name to browse to Web sites on your machine, for example http://idesign/, you’d create the certificate with the subject name “CN=idesign”. Best use is enter de FQDN like: webmail.wardvissers.nl


makecert.exe opties

Hier onder staat een lijst met opties om een goede Self-Signed SSL Certificaten te maken.


Option

Description

-n certName

The subject name for the certificate. This is a distinguished name following the X.500 specification. It can be as simple as “CN=localhost” or include a richer description of the subject with “CN=localhost, O=IDesign, OU=Architecture, E=mlb@idesign.net”.

-pe

This allows the private key to be exported after generating it. It is a good idea to generate the private key pair and export the certificate to apply password protection, even if it is a test certificate.

-sr

Certificate store location where the key will be generated. It doesn’t matter which store you choose, because you will likely export the key pair, password protect it, and then import it to the correct store for use. Values can be currentuser or localmachine.

-ss

Which logical store will the certificate be installed in? Specify “My” here; this will place it in the Personal logical store.

-sp

The cryptography provider to use. A list of possible providers can be found here: http://windowssdk.msdn.microsoft.com/en-us/library/ms731160.aspx. The “Microsoft RSA SChannel Cryptographic Provider” is not subject to government restrictions for usage.

-sy

Cryptography provider type; an integer representative of the provider setting for the -sp option. Use the value 12 for the “Microsoft RSA SChannel Cryptographic Provider”.

-r

Indicates a self-signed certificate.

-sky certType

Can be signature or exchange. Use exchange for SSL and secure messaging.



Het uitvoeren van het Certificaat

De bedoeling is om .pfx (Certificaat + Wachtwoord) en een cer op te slaan voor later gebruik.

De .cer heb je al opgeslagen tijdens het aanmaken van het certificaat.
Via de Certificaten console kun je .pfx bestand exporteren.

Hoe je dat doet zie je hieronder:

RechterMuis op het Certificaat en dan Alle Taken à Exporteren

clip_image004
clip_image006

clip_image008

clip_image010

clip_image012

clip_image014

clip_image016
clip_image018
Voorbeeldje van de melding die je krijgt.

clip_image019

VMware Server 2.0 Tips and Tricks

 

Hierbij sommige  Tips & Tricks van VMWare Server 2.0

1. Use a web browser (Firefox and Internet Explorer are the two officially supported ones) to
connect to http://yourserver:8222 or https://yourserver:8333 if you selected the default
ports during installation/configuration.

2. If you manage from a Windows client then the VI (Virtual Infrastructure) client is also
available which is what is used to manage ESX/ESXi and Virtual Center too. It is available at
https://yourserver:8333/client/VMware-viclient.exe.

3. The VI Client cannot add USB devices to VMs running at hardware versions greater than 4 –
version 7 is required for USB 2.0 support.

4. Specify yourserver:8333 for the connection in the VI Client.

5. The credentials you specify to logon are admin credentials that you would use on the host
even without VMware installed – VMware does not introduce any credentials/accounts
itself.

6. The admin account you use must have a password defined for it or you will not be able to
login.

7. The remote console is a locally installed application which will be installed when the console
tab is first clicked onto.

8. For remote management through firewalls, VPNs or over SSH tunnels, port 902 is also used as well as 8222/8333. Note that during Linux configuration; you may have selected a
different port from 902 as sometimes it can be statically detected as being in use.

9 .Backing up VMs can be achieved in a number of ways:
a. If the VM is not powered up then simply copy all of its files to another location.
b. If the VM is running, take a snapshot and then copy the base disk file(s) to another
location (*.vmdk except *-00001*.vmdk). A new VM can then be constructed using
this disk. Note that you can only have a single snapshot.
c. In a Windows VM, use a VSS (Volume Shadow copy Service) aware backup tool to
create a backup that can then be restored using the same tool to a bare VM.
d. On a Windows host, use a VSS aware backup tool to backup the files that constitute
the VM.

10. If a VM fails to power on and was not shut down properly, check for .lck files/folders and
remove them if they exist as long as the VM definitely is not running.

11. Server 2.0 stores VMs in datastores – a default datastore is created which is calle
“[standard]” and will map to the root of the folder you select during installation.

12. VMs can be run from external USB drives by defining a datastore for the mount point.

13. Remote datastores can also be added – NFS for Linux hosts and CIFS/SMB for Windows.

Bekijk HIER de volledige PDF met Tips & Tricks van VMWare Server 2.0

Gratis Sybex’s Best of Exchange Server 2007

Sybex is een van de oudste Computer Book leveranciers. De boeken worden door IT enthousiastelingen over de helewereld gebruikt voor de technische diep gang en voor examens.

Sybex heeft een gratis boek in pdf vorm aangeboden genaamd Sybex Best of Exchange 2007
Het is een verzameling van de volgende vijf boeken:

– Mastering Exchange Server 2007
– Microsoft Exchange Server 2007: Implementation and Administration
– Exchange Server 2007 Infrastructure Design: A Service-oriented approach
– MCTS: Microsoft Exchange Server 2007 Configuration Study Guide: Exam 70-236
– MCITP: Microsoft Exchange Server 2007 Messaging Design

Het boek heeft de volgende inhoud:

  • Exchange Server Architecture
  • Applying Planning Principles to Exchange Sever 2007
  • Exchange Server Administration
  • Installing Exchange Server 2007
  • Scaling Upward and Outward
  • Sizing Storage Groups and Databases
  • Defining Policies and Security Procedures
  • Planning a Backup and Recovery Solution for Exchange Server 2007
  • Planning Exchange Server 2007 Security
  • Creating, Managing Highly Available Exchange Server Solutions

    •  

     

    Best of Exchange eBook

    Downloaden van het boek doe je HIER

    Translate »