Importing/Exporting Local Policies from/to GPO Directives with 'LocalGPO'

The other day we installed Microsoft Security Compliance Manager, today we see that within its installation we have a command-line utility called LocalGPO. It will allow us to export the local policies of a computer to a GPO policy backup to later use them in the Active Directory or import from a GPO backup (Active Directory) to the home team, Useful for computers that can't belong to a domain, teams in DMZ…

Microsoft Security Compliance Manager – Hardening our servers

Microsoft Security Compliance Manager 2 is a repository of Microsoft security templates that we can apply to our servers or PCs on our network providing greater security, since these templates are predefined depending on the OS. and the services run by the target machine. The good thing is that we will be able to keep the templates always 'up to date’ through updates that we can download from the console. We will be able to import GPOs, More Baselines… we will be able to edit/duplicate them and to apply them to our environment we will export them.

Configuring Debian+Apache as an OWA Reverse Proxy in DMZ

If we have an Exchange installation and we want to publish OWA abroad, we should never open the ports directly to our Exchange, for this there are proxies located in the DMZ that will present us with our OWA. In this case we are going to set up a Reverse Proxy with DEBIAN and APACHE. To do this, we start from the fact that we have a debian installed in our DMZ with the port 443 of the WAN pointing at it and allowing the port to pass through 443 from our server to the LAN's Exchange CAS.

How to renew Exchange self-signed certificates 2007

This article shows a task that we will have to perform in our Microsoft Exchange organization 2007, as the services offered by Exchange use certificates to ensure connectivity, whether internal or external communication. In principle, once we have installed Exchange Server 2007, The certificates you generate for each service will last us a year, so before they expire we will have to renew them, We will detect this with events in the Event Viewer, or directly due to a drop in said service.

Deploying corporate Outlook signatures automatically

An atypical document, but super interesting if we find ourselves in this case. I had the need to put a corporate fund and a corporate signature for my users' email, it doesn't matter Outlook 2003 than with Outlook 2007 or directly with OWA; my servers are Exchange 2003 and Exchange 2007. I needed a tool that would integrate with Active Directory and that could automatically put a signature on each user with their name, Surnames, charge, email… without me manually having to do anything, that takes it all from the Active Directory data. And then deploy it automatically with a GPO directive and vúalá! All users with corporate email.

Configuring Symantec Backup Exec granular backup 12.5 on an Exchange Server 2007

Well, In this document we see a somewhat fussy topic that sometimes gets annoying, since you have to be careful with all the configuration steps so that it does not fail. In the document we will see how to configure our Symantec Backup Exec backup server 12.5 so you can back up every mailbox in our Microsoft Exchange organization at the email level 2007, in case of loss of mail, Be able to individually retrieve each email, or at a general level a mailbox or the entire private/public mail database.

Setting up Microsoft Exchange 2007 with SCC (Single Copy Cluster) on Windows Server 2008

In this document, we will see how to set up a high availability cluster for our Microsoft Exchange mail server 2007 Server with the Microsoft Windows Server operating system 2008, in this case we will set up a cluster system called SCC (Single Copy Cluster o Clúster de Copia Única). In this previous document the rest of the possibilities that we would have are described, we may be more interested in one system than another (HTTP://www.bujarra.com/?p=2362). As discussed above, SCC is the cluster that we can know from previous editions of Microsoft Exchange, is a shared storage failover cluster system, This is, we will have several nodes with the 'Mailbox function' one of them being active and the rest passive. Storage must be shared, Databases must be in an array or remote storage system, iSCSI, fibre... When the active node fails, One of the nodes in a passive state […]

Different types of Microsoft Exchange high availability 2007 (CCR, SCC, CSF & SCR)

Well, After a long time out, with a lot of work, I had time to look at myself and wrestle with the different types of high availability that Microsoft Exchange gives us 2007 to date. Unlike Microsoft Exchange 2003, This version, brings more possibilities to have a high availability of our mail server, having different methods, some cheaper than others and more or less complex. In principle, we have: CCR (Cluster Continuous Replication o Replicación Continua en Clúster) SCC (Single Copy Cluster o Clúster de Copia Única) CSF (Local Continuous Replication o Replicación Continua Local) SCR (Standby Continuous Replication o Replicación Continua en Espera)

Automated installation of Exchange prerequisites 2007 on Windows Server 2008

In this document, explains how to automate the installation of one or more Exchange servers 2007, basically the requirements of the installation. In this Technet article http://technet.microsoft.com/en-us/library/bb691354.aspx shows how to create scripts to install Exchange prerequisites 2007 and Windows Server 2008 to install the Exchange feature you're interested in 2007 via command line. With this website you can generate some response files (XML) to install whatever you need.