70-662: Deploying Microsoft Exchange
Server 2010
Course 01 - Active Directory and
Supporting Infrastructure
Slide 1
Course 01: Active Directory and Supporting Infrastructure
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 2
Active Directory Domain Services Centralizes Login Issues and Configuration
Network Infrastructure must be in place for all to functiono Active Directory
o DNS
o DHCP
o SNTP / Time Server
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 3
All user Accounts
All machine Accounts
Security based information
Group Policy
Replication of DNS records
Physical Topology
Logical Topology
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 4
Forest
Domain
Child Domain
Domain Tree
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 5
Sites – physical topology mixedwith logical
Site 1 Site 2
Domain
Site 1
Domain 1 Domain 2
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 6
Trusts allow communications between machines
Trusts allow users to login from trusted machine and access resources that are also trusted.
Types of Trustso Transitive Trusts
o Shortcut Trusts
o Forest Trusts
o External Trusts
o Realm Trusts
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 7
Domains
Domain Tree
Forests
Trusts
Domain Controller
Global Catalog
Sites
Replication
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 8
Domainso Administrator-defined collection of computers.
o Share a common security database
o User and Group Accounts are maintained by administrators
o Computer and Users can be organized into Organizational Units
Domain Treeo A set of domains that share the same DNS namespace
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 9
One or more domains that share a schema
Schema contains all objects and object attributes for network
All domains in forest share a transitive trust relationship.
Provides a security boundaryo No access from outside of forest
Schema aware applications can only have one instance per forest
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 10
o Allows users to share or authenticate across trusted domains
o Trusted vs. Trusting
• One side can share, one side can access
o All domains in the forest have transitive trust relationships with all domains in the forest.
o You can create a direct or shortcut trust
TrustsDomain A Domain B
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 11
Holds local domain databaseo User accounts and computer accounts
o Responsible for authentication of users and computers
o Only contains information for domain it belongs to
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 12
Holds subset of information from other domains in the forest
Limited information on objects in other forests
Exchange object attributes for mail-enabled and mailbox-enabled objects
Global Address List generation, location of mailboxes for delivering mail
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 13
One or more well connected IP Subnets
Usually in same location
Used to control replication
All computers in site must connect at minimum of 10 Mbps with each other
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 14
The sharing of information between domain controllerso Domain information
o Configuration data
o Schema
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 15
Domain Partitiono Users, Computers, Groups and other objects for domain
o Represents logical domain structure
o Replicated to all domain controllers in a domain
o Exchange Uses for Email Recipients
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 16
Configuration Partitiono Configuration information for Active Directory and applications
o Only one configuration directory partition per forest
o Houses site topology
o Information to construct directory tree hierarchy
o Replicated to all domain controllers in the entire forest
o Where all Exchange Information exists
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 17
Schema Partitiono All object types, and their attributes, that you can create in Active
Directory
o Only one schema per forest
o Replicated to all domain controllers in the entire forest
o Contains all Object classes and attributes
Exchange organization and Active Directory forest: one-to-one relationship
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 18
Application Partitionso All Specific application data that the application requires
o Replicated to all domain controllers in the entire forest with a replica of the partition
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 19
Every Active Directory object is referenced by a distinguished name (also known as DN)o The distinguished name identifies the complete path through the container
hierarchy by which the object is reached
Every forest has:o One configuration directory partitiono One schema directory partitiono At least one domain directory partition that represents the forest root domaino Every additional domain that belongs to a forest adds one domain directory
partition to the forest
The three default Active Directory partitions have the following distinguished names:o Forest-root domain directory partition: DC=ForestRootDomaino Configuration directory partition: CN=configuration,DC=ForestRootDomaino Schema directory partition: CN=schema,CN=configuration,DC=ForestRootDomain
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 20
DNS
DHCP
SNTP / Time Server
Domain Controller / Active Directory
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 21
Consists of records to locate network resourceso SRV Records
• Locate Services on Network
o Host Records
• Name to IP address resolution
o PTR Records
• IP Address to name
o Many other examples
DNS records can be updated manually or automatically
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 22
Active Directory Integrated Zones
Primary Zones
Secondary Zones
Stub Zones
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 23
Dynamically assign IP configuration to clients
Integrates with DNS
Will update client information with DNS
DHCP Client commandso IPConfig.exe /release
o IPConfig.exe /renew
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 24
Works with Kerberos Authentication
Located on PDC Emulator - authoritative
Commands:o Net time
o W32tm.exe
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 25
Requirements:o SRV records to locate domain controllers
o Host records to locate other servers
o MX records to locate mail servers in other organizations
DNS Record Type Example
SRV _ldap._tcp.domain.com. IN SRV 0 100 389 servername.domainname.com
Host servername.domainname.comIN A 10.10.10.10
MX MX 10 servername.domainname.com
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 26
Setup Switch Description
/PrepareAD/OrganizationName:”organizationname”
• Prepares the global Exchange objects • Creates the Exchange universal security groups in the root domain• Prepares the current domain• Requires Enterprise Administrator and Exchange Administrator rights if otherwise denied access
/PrepareLegacy ExchangePermissions
• Required if the organization includes previous versions of Exchange Server
/PrepareSchema • Prepares the schema for the Exchange Server 2010 installation
• Requires Schema Administrator and Enterprise Administrator rights
/PrepareDomain
/PrepareDomain domainname
/PrepareAllDomains
• Prepares the domain by creating a new global group called Exchange Install Domain Servers
• Requires Domain Administrator rights
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 27
Feature Standard Edition Enterprise Edition
Database Support 5 Databases 100 Databases
Database Storage Limit Limits are only hardware dependant
Limits are only hardware dependant
DAG Membership Supported Supported
CAL Option
Exchange Server Standard CAL
E-mailShared CalendaringOWAActive Sync
Exchange Server Enterprise CAL
Requires Standard CALUnified MessagingPer-user and per-distribution list journalingManaged custom e-mail foldersForefront Protection for Exchange
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 28
Hub Transport
Server
Mailbox Server
Edge Transport
Server
Client Access Server
Unified Messaging
Server
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 29
Hub Transport Server Roleo Internal Mail Flow
• Messaging Policy and Compliance
• Anti-Spam and Antivirus protection
Mailbox Server Role• Host mailbox databases
• Provide e-mail storage
• Host public folder databases
• Calculate e-mail address policies
• Generate address lists and offline address books (OABs)
• Conduct Multi-Mailbox Searches
• Provide high availability and site resiliency
• Provide content indexing
• Provide messaging records management (MRM) and retention policies
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 30
Edge Transport Server Roleo Internet Mail Flow
o Anti-Spam and Antivirus Protection
o Edge Transport Rules
o Address Rewriting
Client Access Server Role• Outlook Web App
• The Availability Service
• The Autodiscover Service
• Exchange Active Sync
• POP and IMAP
Unified Messing Server Roleo Combines voice messaging, fax messaging and e-mail messaging into
Exchange
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 31
Install All Server Roles on one servero Except the Edge Transport Server
Exchange Online Services good option
Backups criticalo Mailbox Data
o System State
o Exchange Information
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 32
Small to Medium sized organizations
Install all roles (except Edge Transport Server Role) on minimum of 2 servers
Two Domain Controllers per domain
DAG members can host multiple roles
One Edge Transport Server on Perimeter network
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 33
Two Domain Controllers
Two Global Catalog servers for each domaino If multiple sites – multiple Exchange Servers per site
One + Mailbox Server Role o Best to have multiple per site
Dedicated Exchange Server Roles on servers per site with Exchangeo Hub Transport
o Client Access
1+ Exchange Servers With Edge Transport Server Role
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 34
You can combine all server roles, except the Edge Transport server role, on one server
Component Recommendation
Processor cores • Minimum: 2
• Recommended: 8
• Maximum: 24
• Plan on using half the processor cores for the mailbox server role
Memory • Recommended: 8 GB plus 2-10 MB per mailbox
• Maximum: 64 GB
When combining server roles, reduce the maximum number of mailboxes by 20%. You can combine server roles with Mailbox servers that are DAG members.
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 35
Exchange Online Services: o Business Productivity Online solution
o E-mail and calendar functionality hosted by Microsoft
o E-mail co-existence and migration of mailboxes & GAL
o On-premise and hosted mailboxes with Exchange Server 2010
o Includes:
• Live Meeting
• SharePoint
• Communicator
• LYNC
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 36
Infrastructure Component:
Requirements:
Active Directory Schema Master:
• Windows Server 2003 (SP2)
• Windows Server 2008
• Windows Server 2008 R2
Global Catalog Servers (ALL):
• Windows Server 2003 (SP2)
• Windows Server 2008
• Windows Server 2008 R2
Domain and forest functional levels must be at least Windows 2003
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 37
Infrastructure Component:
Requirements:
DNS Name Resolution:Global Catalog Domain ControllersOther Exchange Servers
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 38
Processor
• Intel 64-bit architecture
• AMD64 architecture
Memory
• 2 gigabytes (GB) minimum
• Additional memory required based on server role and load
Disk
• 1.2 GB free disk space for Exchange Server files
• 200 megabytes (MB) free on the system drive
File System
• NTFS file system for all drives
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 39
64-bit edition of Windows Server 2008, Windows Server 2008 R2 Standard, or Enterprise Edition
AD DS management toolso Required for all Exchange 2010 servers (Except Edge Transport Servers)
Microsoft .NET Framework 3.5 (SP1) or later
Windows Remote Management 2.0 (WinRM)
Windows PowerShell version 2.0
Various Server roles require different software requirements
Net.Tcp Port Sharing Service configured to start automatically before Exchange Server Installation
Look at each server role for separate installation requirements
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 40
Install prerequisite software
Run setup.exe from the installation
source
Choose the option to install Exchange
Server 2010
Install the Exchange language
packs
Choose the installation type
Provide the Exchange
organization name
Choose the option to enable Outlook
2003 or earlier clients
Configure the Client Access server
external name
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Slide 41
Parameter Options Description
/mode •Install, Upgrade, Uninstall, Recoverserver•Default: Install
Specifies the Setup program actions
/roles •HubTransport, HT, H• ClientAccess, CA, C• EdgeTransport, ET, E• Mailbox, MB, M• UnifiedMessaging, UM, U• ManagementTools, MT, T
Specifies which roles to install
/ServerAdmin User or group Specifies an account with Exchange Server permission
/NewProvisionedServer Server name/ServerAdmin: User
Creates Exchange computer account for delegated installation
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
_____________________________________________________________________________________
Review Questions:
1. Which is NOT a type of trust in a trust relationship?
A. Transitive trust
B. Forest trust
C. External trust
D. Internal trust
2. True or False: An Active Directory Forest is a security boundary to protect
against outside access.
A. True
B. False
3. True or False: It is possible to have several configuration directory partitions per
forest.
A. True
B. False
4. DNS consists of records to locate network resources. The SRV records:
A. Name to IP address resolution
B. Locate services on the network
C. IP address to name
D. Assigns IP configuration
5. True or False: Edge Transport Server Role adds a layer of protection from spam
and viruses from e-mails internal to the organization.
A. True
B. False
6. True or False: All server roles can be placed on one server in a simple
organization.
A. True
B. False
7. True or False: When running Exchange Server 2010, domain and functional
levels must be at least Server 2008.
A. True
B. False
8. True or False: Both Users and Computers have accounts in an Active Directory
domain.
A. True
B. False
9. True or False: The Schema contains all the IP addresses of the nodes on the
network.
A. True
B. False
10. Every Active Directory object is referred to by which of the following?
A. Distinguished name
B. User name
C. Alias
D. Domain name
Answer Key:
1. D
The types of trusts are: transitive trust, shortcut trust, forest trust, external trust
and realm trust.
2. A
True. A forest provides a security boundary; there is no access from outside of
the forest unless explicitly allowed through a forest trust.
3. B
False. Only one configuration directory partition per forest is allowed.
4. B
The SRV records locate services on the network.
5. B
False. The Edge Transport Server Role does add another layer of protection
from spam and viruses, but this layer of protection is provided to messages
coming from the internet, not internally.
6. B
False. In a simple organization all server roles can be placed on one server,
except for the Edge Transport Server. Edge Transport Server cannot be a part of
Active Directory domain or participate in Active Directory security; therefore, it
cannot be on a server with the other roles.
7. B
False. When running Exchange Server 2010, domain and functional levels must
be at least Server 2003.
8. A
True. Active Directory contains accounts for all computers and all users that are
participating in domain security.
9. A
True. The Schema has all the objects and object attributes that will be named
within the forest.
10. A
Every Active Directory object is referred to by a distinguished name.