Sharing SMTP name space with one Exchange server

Starting clean and neat is the best way always dealing with Active directory and Exchange. Objectives: We will host two companies under same exchange server. First company called SMTp.25.org .Second Company called SMTp25.netEvery Exchange will have default recipients policy which will be stamping all mail enabled users. We will modify this policy, by double click on default policy and click on E-mail addresses. Highlight primary SMTP address and click edit in the address bar change it to @YourCompany.Local

• Click okay to close the window.
  
• Now go back to ESM (exchange system manager). Go to your Storage group and Rename one of the SG(storage group) to Hosted Exchange
  
• Under this SG create a mail store called FirsCompanyName.org (Domain name of the first company)
  
• Create another mail store called SecondCompanyName.com (Domain name of the second company)
  
• Now go back to your Active directory and do the same thing with OU structure (organizational Unit)
  
• Create an OU called FirsCompanyName.org (Domain name of the first company)
  
• Create an OU called SecondCompanyNmae.com (Domain name of the second company)
  
• I have created two subs OU on my scenario to group users in one OU and computer another OU to have better control with GPO's.
  
  

Great last thing we need to go, go back to ESM, and drill down to Recipient Policies. Make a right click new policy Select box boxes, click okay, on the name tab, FirstCompanyName.com (Domain name of the first company)

• Click Modify
  
• Click Storage
  
• Select mail boxes in this mail store
  
• Click browse
  
• Click advance
  
• Click find now
  
• Select the mail store we named it first company and perform same task for the second company
  

Now create user for both companies and Recipient policy will stamp them with correct SMTP Proxy address.

How to share an SMTP address space in Exchange 2000 Server or in Exchange Server 2003

Best

Oz ozugurlu

 

 

Everyone" group has been granted "Send As" and "Receive As" rights

Here is the scenario, all o f a sudden you discover everyone can see everyone's mailbox on your SMTP domain. Full explicit permissions on the object (everyone), including Receive As permissions seems to assign everyone. Everyone" group has been granted "Send As" and "Receive As" rights I have seen this, may occur after migration scenarios.

To see the Security Tab on ESM, (Exchange system manager) copy the code below and paste into a notepad and save it as "ShowSecurityPage.reg" on your desktop. Go ahead double click on it to make the register changes.

• Copy and paste the code into notepad
  
• Click file Save
  
• Name the file ShowSecurityPage.reg
  
• Click on save as type, change it to all files
  
• Save it on your desktop, and double click on it to make the changes
  

Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Exchange\EXAdmin] "ShowSecurityPage"=dword:00000001

Best,

Oz Ozugurlu

Do not point your DC/DNS servers to your ISP DNS servers

Do not configure the DNS settings on the domain controllers to point to your Internet Service Provider's (ISP's) DNS servers .Here is the short story behind why or why not you should not point your DC (domain Controller)/DNS server to another IP address, than server itself IP address. When you promote a server to be domain controller active directory database gets installed on the server (NTDS.DIT database.) After installation, the DNS service on the domain controller, and the clients who needs to be serviced by your DC, needs to be able to provide the services and the information to your clients (work stations)

The DC/DNS server, which is Authentication server is ready to service the clients (work stations) when they need to use these services.

What type of services a client would request in Active directory environment. Authentication service( when a client enters user name and password) some entity needs to look into existing database, and compare the information against, existing information and provide validation, also assign a windows token back to the clients, so that client can log into the domain.

Let's say, Client needs file access on the File server, or your work station needs DHCP service, to obtain IP address. How your client will get thee services. Client will use DNS and look at the SRV (service records) and identify the Domain controller, DHCP server File server and so on.

Who your client will ask all these questions is going to be your DC/DNS server, and you want your DC/DNS server to go to DIT database and get all these good information and return it back to the client as services.

Now think about a scenario, if you configure your DC/DNS server primary DNS IP addresses point to your ISP DNS servers. In sense you are telling your server, if someone asks you a question, you need to ask this server (ISP DNS server). Let's think if this will work or not. If your client is asking question to your DC/DNS and wants to locate a printer, and your DC/DNS has to ask ISP DNS servers, where the closes printer is located? ISP DNS servers will go back and tell your DC/DNS server, what are you talking about? Who cares about your internal printer, ask me how to get to such web site I will assist you, please do not ask me personal questions and I don't care. So you got the answer from ISP DNS servers and now you need to pass this on to your client, do you think your client will be happy to hear this? Answer will be no.

So short of this story is when you run DCPROMO and define DNS name space (yourcompany.com), your server becomes authoritative for this DNS name space. Your server should be able answer all the question regarding to this DNS name space.

The story with using forwarders, When a client ask question about another DNS name space, where your server is not autherative for, you are telling your server, ask this guy (ISP DNS server), called recursive query, if he does not know he will ask someone else and get partial answer and eventually the information has been asked by a client will come back to the client, so that client can make direct TCP/IP connection to the requested resource

By the way windows 2003 server out the box can connect to the internet by asking questions to the root servers by using root hints.

http://smtp25.blogspot.com/2007/05/do-not-configure-dns-client-settings-on_818.html

Best

Nslookup is your friend NSLookup -type=all

DNS entries and the NSLookup utility are used to troubleshoot SMTP related mail issues. NSLookup is available on most server based platforms and can be a great help in determining where the problem lies, often times. If you have determined that your SMTP problem is with receiving Internet mail or sending mail to a particular Internet domain, you will want to use NSLookup to evaluate DNS records. Telnet is often used after analyzing the DNS records to test connectivity.

NSLookup (Name Server Lookup) is a command-line executable

(NSLOOKUP.EXE) that is available on most server-based platforms,

Including:

• Windows NT 4.0, Windows 2000 and Windows XP, Vista, Windows Severs Family

• OS/400 (iSeries) and OS/390 (zSeries)

• UNIX platforms

DNS: Domain Name service/system. DNS translated complicated 32 bits IP addresses into human friendly names. DNS in windows active directory achieves different goals and objectives. Below is one of my post in TechNet DNS forums

Many people seem to have this question, and some confusion how to configure DNS with integration of active directory. DNS (domain name service/System) plays critical role in AD environment. I believe most of the confusion being caused by not having solid active directory knowledge. I have tried to put some notes together to help to community and cleared out some of this confusion. Please take a look below article to see if it helps you DNS is backbone of active directory and directory service depends on DNS mechanism (service records) to work properly. Since, the principle of having AD and its database, being able to offer services to its clients, understanding how these services are being offered, and how they correlates into DNS concept is what makes AD works in my opinion.

http://smtp25.blogspot.com/2007/05/do-not-configure-dns-client-settings-on_818.html

Best regards

oz ozugurlu

I am not going to show you how to get everything with one shoot. We need to figure out all the records including MX records for sbc.com. Here is the command we would issue from DOS or power Shell

PS C:\> nslookup -type=all sbc.com

No win this example I have asked the internal DNS server 10.160.9.70 I got the above answer.

I have 4 more internal DNS servers and I want to ask them same question. Here how we do it.

If I want to see what domain controller my workstation authenticated against I would issue

I would type on DOS following command

C:\WINDOWS\system32>set

I also would use this command and find out the DC I have logged into.

F:\>echo %LOGONSERVER%

\\NHQDTCDC4

Now Nslookup is asked the question to this DC in the example.

F:\>set

ALLUSERSPROFILE=C:\Documents and Settings\All Users

APPDATA=C:\Documents and Settings\OOzugurlu\Application Data

CLASSPATH=.;C:\Program Files\Java\j2re1.4.2_12\lib\ext\QTJava.zip

CommonProgramFiles=C:\Program Files\Common Files

COMPUTERNAME=OOZUGURLUPC

ComSpec=C:\WINDOWS\system32\cmd.exe

DEFLOGDIR=C:\Documents and Settings\All Users\Application Data\McAfee\DesktopPro

tection

EXCHICONS=C:\Program Files\Exchsrvr\bin\maildsmx.dll

FP_NO_HOST_CHECK=NO

GC_LOCALEDIR=C:\Program Files\Common Files\Clarify\bin\locale

HOMEDRIVE=F:

HOMEPATH=\

HOMESHARE=\\NHQJPK1FS1\OzugurluO$

HOMESRV=NHQJPK1FS1

LOGONSERVER=\\NHQDTCDC4

LOGONSRV=\\NHQDTCDC4

NUMBER_OF_PROCESSORS=2

OS=Windows_NT

Path=C:\ORACLE\ORA81\bin;C:\Program Files\Oracle\jre\bin;C:\Program Files\Suppor

t Tools\;C:\Program Files\Common Files\Clarify\bin;C:\WINDOWS\system32;C:\WINDOW

S;C:\WINDOWS\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\;C:\Program

Files\Diskeeper Corporation\Diskeeper\;C:\Program Files\Symantec\pcAnywhere\;C:

\Program Files\QuickTime\QTSystem\;C:\WINDOWS\system32\WindowsPowerShell\v1.0

PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.PSC1

PROCESSOR_ARCHITECTURE=x86

PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 3, GenuineIntel

PROCESSOR_LEVEL=15

PROCESSOR_REVISION=0403

ProgramFiles=C:\Program Files

PROMPT=$P$G

QTJAVA=C:\Program Files\Java\j2re1.4.2_12\lib\ext\QTJava.zip

SESSIONNAME=Console

SystemDrive=C:

SystemRoot=C:\WINDOWS

TEMP=C:\DOCUME~1\OOZUGU~1\LOCALS~1\Temp

TMP=C:\DOCUME~1\OOZUGU~1\LOCALS~1\Temp

USERDNSDOMAIN=ARCHQ.RI.REDCROSS.NET

USERDOMAIN=ARCHQ

USERNAME=oozugurlu

USERPROFILE=C:\Documents and Settings\OOzugurlu

VSEDEFLOGDIR=C:\Documents and Settings\All Users\Application Data\McAfee\Desktop

Protection

windir=C:\WINDOWS

C:\>nslookup

Default Server: nhqdtcdc3.Smtp25.org

Address: 10.160.9.70

> type=mx sbc.com

Server: sbc.com

Addresses: 144.160.134.61, 144.160.103.79

The server "10.160.9.70: who is taking to us and giving answer back to us.

Now I want to ask same questions to another DC/DNS server, here how to switch to another DNS server( you need to know the FQDN of the server)

> Server reddns1.redcross.org

Default Server: reddns1.redcross.org

Address: 162.6.6.13

Default Server: reddns1.redcross.org

Address: 162.6.6.13

> type=mx sbc.com

Server: sbc.com

Addresses: 144.160.134.61, 144.160.103.79

You can ask to any DNS server by typing following command

Server FQDN of the DNS server and pressing enter

Best

Oz Ozugurlu