• Enabling Anti-spam Filter Updates on the Edge Transport Server
• Pre-Order Henrik Walther's Exchange Server 2007 book
• MSExchange.org Learning Zone Articles of Interest
• KB Articles of the Month
• Tip of the Month
• MSExchange Links of the Month
• Ask Henrik Walther a question

1. Enabling Anti-spam Filter Updates on the Edge Transport Server

Welcome to the February edition of the MSExchange.org newsletter!

This month I want to talk about what's required as well as how you enable anti-spam filter updates on an Exchange 2007 server with the Edge Transport server role installed. I've had an Edge Transport server deployed in my home production environment since beta 2, but since I've been using the 32-bit version of Exchange 2007, I've not been able to take advantage of anti-spam filter updates released via Windows update site on this server. You see, in order to take advantage of new anti-spam filter updates, your Edge Transport server must be a properly licensed 64-bit version.

Note:
Although I've used the 32-bit version of Exchange Server 2007 in my home production environment, it's important you bear in mind that this version is only meant for testing and other evaluation purposes. In other words, deploying it in a corporate production environment is unsupported by Microsoft.

Since my Edge Transport server was the last Exchange 2007 server in my home production environment running the 32-bit version of Exchange, I thought it was about time to migrate it to x64 hardware like the rest of the Exchange 2007 server farm. Even the Cluster Continuous Replication and Single Copy cluster based mailbox servers (deployed for testing purposes) runs the 64-bit version, but only because VMWare Server supports 64-bit guests (unlike Microsoft Virtual server which still lacks this functionality).

Note:
Deploying Exchange Server 2007 on virtual hardware is unsupported by Microsoft, but is a good solution when you, for example, want to test the different cluster functionalities in Exchange Server 2007.

When you have deployed an Edge Transport server running 64-bit, and have licensed the product, you still won't see any anti-spam updates from Windows update. This is because anti-spam updates are disabled by default, and must be enabled either using the Exchange Management Console or the Exchange Management Shell (using the Enable-AntispamUpdates cmdlet). To enable this feature using the UI, click Enable Anti-spam Filter Updates in the Action pane on the Edge Transport server, this will bring up the wizard shown below. As you can see you have the option of configuring updates to be manual or automatic.

Click Enable then Finish in order to exit the wizard. The Edge Transport server will now download anti-spam filter updates from Windows update.

Keep in mind that the automatic anti-spam updates functionality is a premium feature that requires either an Exchange Enterprise Client Access License (CAL) for each user mailbox or a Microsoft Forefront Security for Exchange Server license. This type of CAL will allow you to receive automatic updates on a daily basis, unlike a Standard CAL which receives updates on a bi-weekly basis. In addition, it's also worth mentioning that a standard CAL doesn't allow one to download spam signature and IP reputation updates.

You can also read more about Exchange Server 2007 Anti-spam Filter updates by visiting the following resources:

Enabling Forefront Security Anti-spam Updates (MS Exchange team blog)

Anti-Spam and Antivirus Functionality (Exchange Server 2007 Online Documentation Library)

That was all for this time!

Should you have any ideas for content in future editions of the MSExchange.org newsletter, you're more than welcome to shoot me at email at Henrik@msexchange.org.

2. Pre-Order Henrik Walther's Exchange Server 2007 book

By Henrik Walther Are you among the persons who like the articles I write for MSExchange.org? Then this book is definitely for you. It provides you with step by step instructions on how you get going with Exchange Server 2007, and importantly, how you properly manage it after deployment. The TOC for the book: Table of Contents 1. Introducing Exchange Server 2007 2. Installing Exchange Server 2007 3. Managing Recipients in Exchange Server 2007 4. Managing the Mailbox Server 5. Managing the Client Access Server 6. Managing the Hub Transport Server 7. Managing the Edge Transport Server 8. High Availability for Exchange 2007 Mailbox Servers 9. Disaster Recovery with Exchange Server 2007 10. Transitioning from Exchange 2000 or 2003 to Exchange 2007 11. Introduction to Exchange Server 2007 Unified Messaging 12. Publishing Exchange Server 2007 Using ISA Server 2006

To pre-order the book today click here

3. MSExchange.org Learning Zone Articles of Interest

We have a great group of articles in the Learning Zone that will help you get a handle on your most difficult configuration issues. Here are just a few of the newer and more interesting articles:

• Resetting OWA Folder and IIS security permissions in Exchange 2003
• Transitioning from Exchange 2000/2003 to Exchange Server 2007 (Part 3)
• Managing mailboxes in Exchange Server 2007 (Part 1)
• PFDavAdmin tool (Part 2)
• Transitioning from Exchange 2000/2003 to Exchange Server 2007 (Part 2)
• Microsoft Exchange Load Generator
• Using admodify.net to administer and recover Exchange 2003

4. KB Articles of the Month

Here are some interesting and useful MSExchange related articles posted by Microsoft in the last month:

• Update for daylight saving time changes in 2007 for Exchange 2003 Service Pack 1
• Information Store database does not mount with Event ID 9519 and 9518
• Description of the new feature in Exchange Server 2003 that supports Smart Card authentication to Outlook Web Access
• You experience difficulties when you use an Outlook client computer to connect to a front-end server that is running Exchange Server 2003
• You experience incompatibility issues when you implement some operations in Exchange System Manager or in the Active Directory Users and Computers snap-in in Exchange 2003
• The logon process stops responding if you try to reauthenticate when you use a third-party program to log on to Outlook Web Access in Exchange 2003 Service Pack 1
• You cannot differentiate the attachments after you use the Exchange Server 2003 Migration Wizard for Lotus Notes to migrate calendar attachments
• The PR_MESSAGE_DELIVERY_TIME attribute of embedded messages cannot be displayed when you enable envelope journaling in Exchange 2003
• Task data is also migrated when you use "Exchange Server 2003 Migration Wizard for Lotus Notes" to migrate Lotus Notes calendar data to Exchange Server 2003
• You cannot install the Exchange Management Console or the Exchange System Manager on a Windows Vista-based computer
• A user experiences various errors in Outlook after you move the user's mailbox from Exchange 5.5 or from Exchange 2000 to Exchange 2003 SP1 or to Exchange 2003 SP2
• How to address daylight saving time by using the Exchange Calendar Update Tool
• The Exchange Migration Wizard stops responding, or e-mail messages are stuck in the Exchange.box file in Exchange Server 2003
• Text in messages is displayed in an incorrect language when you log on to your mailbox by using Outlook Web Access
• Error message when you try to remove an orphaned mailbox after a failed move operation in Exchange 2003: "The Operation cannot be performed because this mailbox was already reconnected to an existing user"
• Earlier Outlook clients can't connect to Exchange 2007 Server
• You receive an error message when you try to set the storage limits to 2 GB or larger for a mailbox or for a mailbox store in Exchange 2003 or in Exchange 2000
• The Exchange Management Console must remain open when you schedule a task to move a mailbox in Exchange 2007 or in Exchange 2003

5. Tip of the Month

The below question was posted in the Exchange Server 2007 forum this month:

"I recently migrated from Exchange 2003 to Exchange 2007, I am regretting the decision. The new interface and the requirement to use the PowerShell for so much of the management and administration makes me feel like a newbie to Exchange.

I have found links about how to give a user full access to an individual mailbox, but I can't for the life of me figure out how to give permissions to a user to have full access over a whole mailbox database/store.

Things like this were so easy to achieve in Exchange 2003. It seems like a backwards step to me.

Is anyone able to help me with my permissions issue?"

Since I didn't have the answer for this question (and had difficulty digging up the information), I asked the Microsoft guys on our internal Exchange MVP mail list. Ross Smith IV came up with the answer (thanks Ross!), which follows below:

"To use the Exchange Management Shell to grant receive as permissions for a mailbox database (and thus allow access into all mailboxes within the database), run the following command to add the permission to the mailbox store:

Add-ADPermission -Identity "Mailbox Store" -User "Trusted User" -ExtendedRights Receive-As"

Also see Exchange Server 2007 online documentation library for further details.

6. MSExchange Links of the Month

A lot of new content was published on the Exchange TechNet site this month:

Changes in the Administration and Permissions Model

http://go.microsoft.com/fwlink/?LinkId=82727

The Fundamentals of Mobile Access to Exchange 2007

http://go.microsoft.com/fwlink/?LinkId=82728

Transitioning to Active Directory Site-Based Routing

http://go.microsoft.com/fwlink/?LinkId=82729

Domain Security in Exchange 2007 White Paper

http://go.microsoft.com/fwlink/?LinkId=82726

Exchange Management Shell White Paper

http://go.microsoft.com/fwlink/?LinkId=82725

Below four papers are deployment-specific compilations of several Exchange 2007 Help topics and is provided as a convenience for customers who want to view the topics in print format.

Deploying a Standard Exchange Server 2007 Organization

http://go.microsoft.com/fwlink/?LinkId=82170

Deploying a Simple Exchange Server 2007 Organization

http://go.microsoft.com/fwlink/?LinkId=82171

Deploying a Large Exchange Server 2007 Organization

http://go.microsoft.com/fwlink/?LinkId=82172

Deploying a Complex Exchange Server 2007 Organization

http://go.microsoft.com/fwlink/?LinkId=82173

In addition there was (as usual) quite a lot of activity on the MS Exchange team blog. Here are some of the more interesting blog posts:

Outlook Web Access and Exchange 2007, 2003 and 2000 coexistence

http://msexchangeteam.com/archive/2007/02/07/434523.aspx

Determining End2End message delivery latency and server latency through Exchange 2007 Server message tracking logs

http://msexchangeteam.com/archive/2007/02/05/434194.aspx

Video: Microsoft Transporter Suite for Lotus Domino demo

http://msexchangeteam.com/archive/2007/02/02/433050.aspx

Exchange Server 2007 internationalized console GUI layout of name and address information

http://msexchangeteam.com/archive/2007/02/01/432722.aspx

7. Ask Henrik Walther a question

QUESTION: Do you have any articles that discuss the future for SBS 2003? I read a couple of your upgrade to Exchange 2007 Articles but did not find anything that addressed SBS 2003 to anything. Do you have anything of the sort or know where I can find better info?

ANSWER: Unless you're participating in the closed beta for the next major release of SBS (codenamed "Cougar"), there's not much information available yet. What I do know though is that Cougar will be available following the release of Windows Server "Longhorn", which is expected to ship in the end of 2007. In addition Cougar will be offered in 64-bit only and will include Exchange Server 2007.

However, according to Kevin Remde (IT Pro Evangelist at Microsoft), you should be able to install Exchange 2007 on a separate server in your SBS domain. Also see his comment on the MSExchange.org boards.