Datasheet
42
Chapter 1
Designing and Planning Messaging Services
Answers to Review Questions
1. A, C, D. Exchange Server 2007 requires only the Windows 2000 native domain functional
mode, even though it is a good practice to use the Windows Server 2003 domain functional
mode. From the software side it is required to install Windows Server 2003 Service Pack
1 or later on domain controllers and global catalog servers that communicate with
Exchange Server 2007.
2. A, B, C, D, E. Exchange Server 2007 setup creates an organizational unit in root domain called
Microsoft Exchange Security Groups, including the following universal security groups (USGs):
Exchange Organization Administrators, Exchange Recipient Administrators, Exchange View-
Only Administrators, Exchange Servers, ExchangeLegacyInterop.
3. B, C, D. The Prepare Active Directory command Setup /PrepareAD extends the schema
if it was not already extended, configures global Exchange objects in the configuration
partition (e.g., Exchange Administrative Group—FYDIBOHF23SPDLT), creates an orga-
nizational unit in the root domain called Microsoft Exchange Security Groups with five
groups, and prepares the root domain. The command to prepare all domains is Setup
/PrepareAllDomains.
4. C. The root domain has to be prepared every time, no matter if Exchange-related objects or servers
will be installed to it. Other domains that need to be prepared are those that will include Exchange
Server 2007 or Exchange-related objects like mailboxes, groups, or contacts. Domains that include
global catalog servers that are contacted by Exchange Server 2007 do not need to be prepared.
5. C, D. To run /PrepareDomain in a child domain you must be a Domain Admin if the domain
existed during /PrepareAD; otherwise you need to be a Domain Admin as well as a member
of the Exchange Organization Administrators group. As you can run this command from any
server, you do not need to be an Administrator on the Exchange Server.
6. A, B. Only as an Exchange Organization Administrator or an Exchange Recipient Adminis-
trator can you manage Exchange-related objects throughout the Active Directory in any
domain. The Exchange View-Only Administrator and the Exchange Server Administrator
need extra permission on the domain, organizational unit, or object level before being able
to manage them in Exchange.
7. D. Joel can only perform any server-related task. He cannot modify any global configuration,
such as adding an address List, nor is he able to add or move any mailboxes to his Exchange
servers, as he needs extra permissions on these mailboxes to do that.
8. A, B, C. You can delegate the Exchange Server Administrator role to any object that is globally
Active Directory–available. Because a domain local group is available only in the domain
where it exists, it cannot be used for delegation.
9. D. If you chose A, Andy would be an Exchange Server Administrator for an existing server but
would not be able to install a new Exchange server to the organization. Answer B would pro-
vide him the permission to manage any recipient object (e.g., assign a mailbox to a user) as well
as local Administrator permissions on the new server; he still would not have sufficient per-
missions to install an Exchange server. Option C does not exist as an Exchange setup syntax;
thus will also fail.
81461.book Page 42 Wednesday, December 12, 2007 4:49 PM