CEICW completion in SBS 2003

Hello loyal readers - today we complete the CEICW in SBS 2003. Thanks for reading.

Harrybbbbbb, author of Windows Small Business Server 2003 Best Practices

Harry Brlesford | SMB Nation | www.smbnation.com

###

11. On the Web Server Certificate, select Create a new Web server certificate and complete the Web server name field by typing springers1.springersltd.com. Your screen should look similar to Figure 4-11.

Figure 4-11

Creating the full Internet name for external clients to receive security certification.

BEST PRACTICE: What you’ve done in Figure 4-11 is provide the fully qualified domain name (FQDN) that can be accessed directly over the Internet. Remember, you’ll need a resource record (“A” record) registered in the DNS at your ISP which points to the IP address of your wild side network adapter card to make the FQDN functional in this scenario. In the case of SPRINGERS, the IP address

207.202.238.215 would point to springers1. springersltd.com via an A record at the ISP. Whew!

Oh - another war story. Perhaps you completed the original online SBS 2003 hands-on lab that was released in mid-July 2003 with the release candidate software (microsoft.granitepillar.com/partners). In that hands-on lab, there was an exercise where you completed the EICW. On the Web Server Certificate page of the EICW, you configured the Web server name field with Denver.woodgrovebank.local. So what’s wrong with that picture? The *.local domain extension as part of your FQDN entry can’t be referenced externally. So that would be a mistake. One way that you could satisfy your own curiosity about this matter would be to click the More Information button. The first sentence that describes the first option (Create a new Web server certificate) spells it out clearly by saying “...access your server from the Internet.”).

12. Select Enable Internet e-mail on the Internet E-mail page and click Next.

13. Select Use DNS to route e-mail on the E-mail Delivery Method page and click Next. This is the most common setting when using Simple Mail Transport Protocol (SMTP)-based e-mail, and it is indeed part of the SPRINGERS story line.

Notes:

Visit www.microsoft.com/technet for the latest updates for any Microsoft product.

14. On the E-mail Retrieval Method page, select Use Exchange and verify that E-mail is delivered directly to my server. Click Next. This is shown in Figure 4-12.

Figure 4-12

In the case of SPRINGERS and in the real world, you typically have your e-mail delivered directly to the SBS server machine.

Notes:

15. On the E-mail Domain Name page, type springersltd.com in the E-mail domain name field. This is shown in Figure 4-13.

BEST PRACTICE: Here again, if you took the online SBS 2003 hands-on lab available after mid-July 2003 (microsoft.granitepillar.com/ partners), you might recall that you were instructed on the E-mail Domain Name screen to enter a third-tier domain name (e.g., denver.woodgrovebank.com). There is a problem with this instruction in that you only want to enter a second-tier domain name (e.g., woodgrovebank.com).

Figure 4-13

Enter springersltd.com for the register Internet e-mail domain name.

Visit www.microsoft.com/technet for the latest updates for any Microsoft product.

16. On the Remove E-mail Attachments page, confirm that Enable Exchange Server to remove Internet e-mail attachments that have the following extensions. Then observe that all of the file name extensions are selected. This is shown in Figure 4-14. Click Next.

Figure 4-14

This is a really cool new feature in SBS 2003: the ability to block harmful e-mail attachments!

BEST PRACTICE: Exactly what are these harmful e-mail attachments, anyway? And how are they blocked? Are the attachments blocked on POP3 e-mail in addition to SMTP e-mail? The answers to all your questions can be found by clicking the More Information button on the Remove E-mail Attachments page. Take a moment to do that now.

17. On the Completing the Configure E-mail and Internet Connection Wizard page, click the link at the bottom titled here. You will proceed to create a network notebook.

18. As seen in Figure 4-15, a Web page displaying the EICW configuration information appears when you select the “here” link in the prior step. Select File, Save As and save the file as EICW Configuration.htm in the default location (My Documents). Click Save.

BEST PRACTICE: A few comments about this “network notebook” capability in the SBS 2003. First, major hats off to the SBS development team for adding this capability, because every SBS and SMB consultant I know worth their salt has always wanted to do a better job of documenting their network! More important, if you’re the second SBS consultant at a customer’s site, you’ll be mighty appreciative if your predecessor had taken the time to perform this type of documentation.

Second, at the end of any native SBS 2003 wizard, you are presented with a “here” link to facilitate the creation of this network notebook. So, no excuses for not taking an extra moment to literally click “here” and document that network!

Third, look at the default naming in Figure 4-15 below. Notice it’s a sorta hokey looking file name. That’s why you rename the file to be more descriptive in Step 18 above. Fourth, you’re going to plop all of these network notebook files in a folder that becomes your de facto notebook binder.

Oh - you can still follow my advice from my prior book (Small Business Server 2000 Best Practices) and simply select the configuration information via your mouse on the completion page (Step 17) by typing CTRL-C to copy it to the operating system clipboard and then selecting CTRL-V to paste it into a text document (say in WordPad).

Notes:

Visit www.microsoft.com/technet for the latest updates for any Microsoft product.

Figure 4-15

Displaying network configuration information.

19. Close the Web page displaying the configuration information and click Finish back on the completion page. The EICW configuration process will take several minutes. Click Close at the end of the configuration process.

20. A dialog box will appear notifying you that password policies have not been enabled on the network. Let’s go ahead and do that now, so click Yes.

Notes:

21. Select all checkboxes on the Configure Password Policies dialog

box (Figure 4-16) and click OK. Figure 4-16

Implementing meaningful password policies reflects security improvements in SBS 2003.

22. Click OK when notified that your server is connected to the Internet and immediately apply the latest critical and security updates. This is a great reminder and much appreciated. In the real world, you would do exactly what is being suggested (with SPRINGERS, I’m assuming you’re building this on a test network possibly without a real Internet connection, so please make the necessary adjustments). When you click OK, Internet Explorer will attempt to connect to the Microsoft update site. In the case of SPRINGERS (assuming you aren’t truly connected to the Internet) simply close the Web page. I discuss the updating process in Chapter 5.

BEST PRACTICE: By the way (BTW), if you launch Internet Explorer on the SBS 2003 server machine (SPRINGER1) prior to launching and completing the EICW, you will see the Web page displayed in

Visit www.microsoft.com/technet for the latest updates for any Microsoft product.

Figure 4-17. Interestingly, it is a Web page describing the process of

how to complete the EICW.

Figure 4-17

Internet Explorer encourages you to complete the EICW when you first launch it on an SBS 2003 server machine.

Notes:

After your run the EICW, the default Web page programmatically changes to CompanyWeb, as seen in Figure 4-18. Note that it’ll take a moment the first time you launch Internet Explorer post-EICW, as some background page-building activity will occur.

Figure 4-18

Post-EICW, the default Web page becomes CompanyWeb.

It’s been a long haul so far in this chapter, and we’ve got a long way to go. Take a break and I’ll see you back here after a cup of coffee.

Here are the topics we cover computer certification computer careers computer training computer games consulting data recovery data security digital entertainment emerging technology gadget reviews handheld computers hardware reviews home automation home networks home office how-to advice internet linux local companies local news local profiles macintosh mp3 players network security online music online security open-source small-business technology soho software reviews technology books technology dictionary vpn web site reviews wi-fi windows wireless technology tech articles tech news press releases tech dictionary education resources career solutions create your personal blog upload your videos become a writer usergroups special interest group SIG 3com cipts adobe adobe certified expert apc ncpi apple achds acpt acsa actc avaya bea 8.1 certified administrator 8.1 certified architect 8.1 certified developer 9 certified administrator bicsi rcdd checkpoint ccmse ccsa ccsa ngx ccse ccse ng plus with ai ccse ngx cisco access routing and lan switching ccda ccdp ccie ccip ccna ccnp ccnp old ccsp ccvp crmam ip communications optical proctored exams for validating knowledge sales specialist storage networking vpn and security wireless lan citrix cca 3.0 cca 4.0 cca 4.5 cca xp ccea 3.0 ccea 4.0 ccea xp ccia ciw ciw associate ciw certified instructor master ciw admin master ciw designer master ciw enterprise developer security analyst comptia a+ network+ security+ server+ computer associates ca cusa cuse cwna cwna cwsp dell eccouncil cea cep certified ethical hacker chfi e-commerce architect emc emc specialist implemenation technology foundations enterasys ese eta exam express exin exin itil extreme networks ena ens filemaker f7cd f8cd fortinet fortigate foundry cne fujitsu fujitsu guidance software ence hdi css hda hdm hdsa hitachi hitachi certified professional hp ais apc app aps ase certified systems developer csa cse master ase huawei hcne hyperion hcp ibm advanced deployment professional advanced technical expert application developer business process analyst certified administrator certified advanced system administrator certified advanced technical expert certified associate developer certified enterprise developer certified solution designer certified specialist certified systems expert database administrator db2 deployment professional enterprise developer eserver certified specialist ibm on demand business solution advisor solution designer solutions developer solutions expert storage administrator system administator iisfa cifi intel isaca cisa isc cissp sscp iseb itil ism cpm juniper jncia jncis legato lcaa lcea lotus clp lpi lpic level 1 lpic level 2 lpic level 3 macromedia mcafee mcdata csnd microsoft crm mbs mcad .net mcdba mcdst mcitp mcp mcpd mcsa longhorn mcsa 2003 mcsa 2008 mcsd .net mcse mcse 2000 security mcse 2000 to mcse 2003 upgrade mcse 2003 mcse 2003 messaging mcse 2003 security mcse 2008 mcts microsoft business solutions microsoft partner competency mile2 cnsa network appliance nac-na nac-nie naca nace nacp network general sniffer certified professional nokia nokia security administrator nortel ncde ncds ncse ncss ncts novell5 cna 5 cne 6 cna 6 cne 6.5 cne cne upgrade omg ocup oracle 10g dba 10g oca 11i 8i dba 9i dba 9i internet application developer oca ocp8 to ocp8i dba upgrade exam pmi project management professional polycom pcve redhat rhce rhct sair sas institute sas scp saas scp snia snia certified architect snia certified professional snia certified systems engineer snia storage networking certification program administrator professional associate symantec scse scsp scta scts teradata tca v2r5 tcad v2r5 tcda v2r5 tcis v2r5 tcm v2r5 tcp v2r5 tia ccnt ctp tibco tcp trusecure ticsa veritas infraguard chamber of commerce vcp vmware certified professional webex linkedin facebook myspace Professional page layout, image editing, vector illustration, and print production Website design, development, prototyping, and blogging Creation of rich interactive content Industry-standard visual effects and motion graphics Video capture, editing, and production; DVD titling; and digital audio, Adobe Photoshop CS3 extended, Adobe illustrator CS3,Adobe indesign CS3,Adobe Acrobat 8 Professional, Adobe Flash CS3 Professional, Adobe Dreamweaver CS3,Adobe Contribute CS3,Adobe Fireworks CS3,Adobe After Effects CS3 Professional, Adobe Premiere Pro CS3,Adobe Soundbooth CS3,Adobe Encore CS3,Adobe OnLocation,Adobe Bridge CS3,Adobe Version Cue CS3,Adobe Device Central CS3,Adobe Stock Photos, Intel Pentium 4 (1.4GHz processor for DV; 3.4GHz processor for HDV), Intel Centrino, Intel Xeon, (dual 2.8GHz processors for HD), or Intel Core, Duo (or compatible) processor; SSE2-enabled processor required for AMD systems Microsoft Windows XP with Service Pack 2 or Microsoft Windows Vista Home Premium, Business, Ultimate, or Enterprise (certified for 32-bit editions) 1GB of RAM for DV; 2GB of RAM for HDV and HD; more RAM recommended when running multiple components 10GB of available hard-disk space (additional free space required during installation) Dedicated 7,200 RPM hard drive for DV and HDV editing; striped disk array storage (RAID 0) for HD; SCSI disk subsystem preferred Microsoft DirectX compatible sound card (multichannel ASIO-compatible sound card recommended),1,280x1,024 monitor resolution with 32-bit color adapter Blu-ray burner required for Blu-ray Disc creation OHCI compatible IEEE 1394 port for DV and HDV capture, export to tape, and transmit to DV device QuickTime 7.1.2 software required to use QuickTime features Broadband Internet connection required for Adobe Stock Photos* and other services

3PAR, Accellion, Acronis, Actional, Active Endpoints, ActiveGrid, activePDF, ActiveServers, ActiveState, Actuate, Adaptec, Agile Software, AGiLiENCE, Agilysys, Akorri, AlachiSoft, Alter Logic, Altor Networks, Altova, AMD, AMDAHL, Amentra, Amyuni, anacubis, Apani, APC, Appcelerator, AppSense, AppStream, Array Networks, Ascential, Astaro, Attune Systems, Autodesk, AutoVirt, Availl, Avanade, Azul Systems, Barracuda Networks, BEA Systems, B-hive, Black Duck Software, Blackbaud, Blade Network Technologies, Blue Coat, Blue Lane, BlueArc, BlueNote Networks, BluePheonix Solutions, BMC Software, Borland, Bristol Technology, Brix Networks, BroadVision, Brocade, Burton Group, Business Objects, CA, CalAmp, Cassatt, Cast Iron Systems, Catbird, Cayenne Technologies, Ceedo Technologies, Cenzic, Certeon, CiRBA, Cisco Systems, Cision, Citrix Systems, ClearApp, ClearCube Technology, CollabNet, Compass America, Composite Software, Compugen, Compuware, Configuresoft, Continuity Software, Coraid, Courion, Coyote Point Systems, Crescendo Networks, CSC, DataCore, DataSynapse, Dell, Desktone, Digipede Technologies, Double-Take Software, Ecora Software, EDS, eG Innovations, Egenera, Elastra Corporation, Electric Cloud, Embotics, EMC Corporation, Emulex, Endeavors Technology, Enigmatic Corporation, Enterprise Management Associates, Entuity, EqualLogic, Ericom Software, ESRI, EVault, eXludus Technologies, F5 Networks, FalconStor, FastScale Technology, Foedus, Force10 Networks, Fortisphere, Forum Systems, Fujitsu, GemStone Systems, Getronics, GlassHouse, Green Hills Software, Grid Dynamics, GridGain Systems, GT Software, Hitachi, HP, Hyper9, Hyperic, IBM, ICEsoft, IGEL Technology, Illumita, ILOG, IMEX Research, Information Builders, Ingres, InstallFree, Integrien, Intel, Intellium, International Computerware, iTKO LISA, JBoss, Juniper, KACE, Kidaro, LeftHand Networks, Leostream, Lifeboat Distribution, Liquid Computing Corporation, Liquid Technology, Lynux Works, Mainline, ManageIQ, Managed Methods, ManageSoft, Marathon Technologies, McAfee, Mellanox Technologies, Microsoft, Mid-Atlantic Computers, Mindbridge Software, Mindreef, MKS, MonoSphere, Motorola, MQSoftware, mySoftIT, NASTEL, Ncomputing, NEC, Neocleus, NeoPath Networks, Neoware, NetApp, Netegrity, Neterion, Netuitive, Neverfail, Nexaweb, NextAxiom, Nimbus, Nimsoft, Niyuta, NoMachine, Novell, ONStor, Opalis Software, Open Kernel Labs, OpenSpan, OPNET Technologies, Optaros, OpTier, Oracle, Pano Logic, Parallels, Parasoft, Perforce Software, PHD Technologies, Phoenix Technologies, Phurnace Software, Pillar Data Systems, PlateSpin/Novell, Progress Software, Prolifics, ProSync Technology, Provision Networks, QLogic, Quest Software, Racemi, Raritan, Raxco Software, Red Hat, Reflex Security, Resolution Enterprises, RingCube Technologies, Riverbed Technology, Rogue Wave Software, RSA Security, Sagnet Solutions, SanDisk Corporation, SAP, SAVVIS, ScaleMP, Scalent Systems, Seanodes, Secure Command, Secure Computing, Sentillion, Shavlik Technologies, ServInt Internet Services, Silpion IT Solutions, SIMtone, Skytap, Skyway Software, Software AG, Sonasoft, SourceGear, Splunk, StackSafe, SteelEye Technology, StillSecure, StoneFly, Stonesoft, Stoneware, StoreVault, StrikeIron, STT WebOS, Sun Microsystems, SunGard, Supermicro Computer, Surgient, SWsoft, Sybase, Symantec, Systar, TBD Networks, Tenfold, TheInfoPro, Thinstall, Third Brigade, TIBCO Software, Tidal Software, Tideway Systems, TOA Solutions, TRANGO Virtual Processors, Trend Micro, Tresys Technology, Trigence, Tripwire, Ulteo, Unisys, United Devices, VaST Systems, VDIworks, VeeAm Software, Verari Systems, Verio, VeriSign, Vicom Computer Services, VirtenSys, Virtera, Virtual Iron, VirtualLogix, Virtugo Software, Virtutech, VisionCore, Vizioncore, VKernel, VMLogix, vmSight, VMware, Vordel, vThere-Sentillion, Vyatta, WaveMaker, Web Age Solutions, WSO2, Wyse Technology, XDS, XenoCode, Xiotech, xkoto, Xsigo Systems, Zenith Optemedia, Zeus Technology.