Design for a small but secure installation

Good afternoon, all!
My company is starting a migration from dovecot on Linux using OpenLDAP to Microsoft Exchange using Active Directory. We have fewer than 10 employees, want to self-host and want a secure design that won't break the bank. I originally thought
to have the mailbox server running on one of the two domain controllers and the client access running on a separate server in the DMZ. I've started to re-think this in favor of two independent servers.
Is there a design document out there on options for where to place which server in different scenarios? I see lots of information about large enterprise installations but nothing much for the small but secure installation. Management is set on having
Exchange in-house, so hosted Exchange, no matter how much "more better" that would be, is not an option.
May thanks for looking into this!
Gregg

Hi Gregg,
According to your description, I know that you want to migrate to Exchange server on AD from IMAP server.
If it is the case, I suggest check following articles:
1. CSV files for mailbox migration
http://technet.microsoft.com/en-us/library/dn170437(v=exchg.150).aspx
Please notice "IMAP migration" session.
2. CSV files for IMAP migration batches
http://technet.microsoft.com/en-us/library/jj200730(v=exchg.150).aspx
Please notice "Dovecot" session of "Format for the administrator credentials for different IMAP severs" session.
These links applied to both Exchange Online and Exchange On-Premises.
Exchange Online is held on Cloud by Microsoft. If you want to hold Exchange server by yourself, On-Premises server will be the best choice.
Hope it is helpful
Thanks
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Mavis Huang
TechNet Community Support

Similar Messages

How can I see if my program is for more than one user? We think we have bought in design for more users, but can not find out how to get in for more than one?

How can I see if my program is for more than one user? We think we have bought in design for more users, but can not find out how to get in for more than one?

If you bought a CC for team, you can log in at http://adobe.com and insert the e-mail that you gave at the moment at the purchase and than you can manage and see you product/plan/team.
If I was not clear you can use the following link to help you solving your issue:
Creative Cloud Help | Manage your Creative Cloud for teams membership
If your not clear about this situation, contact with an agent of Adobe, by chat or phone. Use the following link to see the type of support you have on this matter:
http://adobe.com/getsupport
I think this will help you.
Regards

Best DSfW Design for new small Tree

I looking to build a replacement tree and server infrastructure for a small network, 80-90 users at a single location, with the possibility of adding 1 or 2 additional locations in the future. I want/need to make it as Active Directory friendly as possible for use by Microsoft SQL Server and VMware View. The current tree structure is O=parent company down to OU=company down to OU=city and then OUs for each server (file, print, and email) and OU=users for users, groups, profiles, and templates.
Ex: someuser.users.moosejaw.rocketpacks.acme for a user. fileserver.moosejaw.rocketpacks.acme for a server OU.
My question is do I do a name-mapped install or a non-name-mapped install for maximum AD compatibility, I can design the tree however best suits the task so whichever approach makes the most sense works for me.
Oh, FYI, fully virtualized infrastructure VMware vSphere 5.1, single purposed virtual servers for each task, DsfW, File, Print, SQL, etc...
Thanks,
Tracy

tcarlton sounds like they 'said':
> Well since its a new install I could install DSfW first as a
> non-name-mapped tree or I could install DSfW later in the process
> AFTER having built a �Traditional� eDir tree instead. My
> question is, given the environment, which is a better approach, if
> any, and what are pitfalls of each approach.
So my response to tcarlton's comment is...
Hmmmm, well if your current tree makes sense to all involved, might be
just as easy to do a name-mapped install at your parent company level.
With OES11, your DSFW domain can span multiple partitions, and this way
all your users, etc would be in your domain.
Stevo

Attempted to install windows 7 for dual boot but OSX installation now missing???

I've tried to install Wndows 7 on my macbook air for dual boot but got the kernal error on boot.
I loaded from the CD again and it sucessfully installed win 7 but when I start the macbook air up it only appears to have windows installed?
How can I get my OSX back?

For some odd reason when you use bootcamp to install the second OS bootcamp is defaulted as the primary OS you will need to hold option key to select the apple OS then in the sys preference under startup disk select apple as primary.

Design for development of solaris package (installer)

Hi,
I am new to solaris. As I am assigned to a new task to develop a installer for an application on solaris10 machine, I need to prepare the design document for the installer. ( I came to know that in solaris all the instllables will be considered as packcages and and are not like .exe's).
So if any one who has previous experience of developing such packages , I Kindly request them to advice me with some tips.( I have refered to Application Packaging Developer's Guide from Sun microsystems which is excellent, now I got an idea how to develop, the question is about preparing design document. )
If possible can you please give the Table of contents of the design document.
If possible please recommend any books as well.
Thanks in advance..
RaghuDeep Amilineni

>
Udo Martens wrote:
> Hi,
>
> i would like to hear your recommandations for a special PI design:
>
> I have a synchronous scenario
> 3rdParty (SOAP) <-> PI <-> SAP (ABAP proxy)
> where i expect some responses of 30.000 data sets. This would take up to 30 minutes in the SAP system.
>
> How can such a scenario be setup by taking performance challenges into account?
>
> I considered to insert a request "package" parameter, to split the response into 10 parts and forward the responsibility to request the right part to the client, but i m not very happy with that.
>
> Do you have any other proposals?
>
> Regards,
> Udo
in similar scenarios this is what we have done;
1. Request the sending application to limit the number of messages per call. Hence each call will have a lesser number of data and your response time will be met
2. what is the relevance of the response to the sender? Is it a mock ack to say that the receiver system has received the data or do you need data back from the receiver system to be send to the sender? If it is only a ack and the data in the response is not relevant then use a Syn to async scenario. That is create the response from PI itself and send it to the sender while you can do an async call to your ABAP proxy to push data to R3

How to make a SAP note compatibale for 4.6c which is designed for ECC6.0

Hi ABAP gurus
I have an OSS note :1093165 which is designed for ECC6.0 but i want to make that features available in 4.6c .how to do that ?any idea please suggest.

So, you want the features of ECC6 in 4.6c? That's quite interesting! You have not however mentioned few sample features. Perhaps you should talk to SAP for this.
Thanks

My computer fulfills the system requirements for Adobe AIR but I am getng a no mssg

My computer fulfills the requirements for Adobe AIR but Adobe Installer gives me a message that says I can't install because my computer does not have the system requirements.

That's circular reasoning. Without knowing the exact specs of the computer, this is not going anywhere. You could be overlooking something simple.
Mylenium

Any way to temporarily remove the clip from the ipod shuffle? I would like to see if it can be placed in speakers designed for the Nano.

is there any way to temporarily remove the clip from the ipod shuffle? I would like to try to connect it to speakers which are designed for ipod nano, but appear to be compatible with the shuffle, if it didn't have the clip.

Unfortunately, Apple can do no such thing. The most you can do is turn it over to the local authorities or the customer service desk if you found in a store or similar.
Kudos to trying to find the owner though!
B-rock

I've just bought a Macbook Pro 15" and I'm trying to use Photoshop, but the resolution its displaying the images at for 100% are too small. I have to design for the web, so need to be intricate with detail, but I'm finding it adjusts the resolution of the

I've just bought a Macbook Pro 15" and I'm trying to use Photoshop, but the resolution its displaying the images at for 100% are too small. I have to design for the web, so need to be intricate with detail, but I'm finding it adjusts the resolution of the image right down. (I mean you can see the image clearly, but it's too small to edit). When I look at Safari and see a web page at 100% it's clear, but the same page displayed in Photoshop CC appears 50% of the size (even though it says it's 100%) If I move the application window to another screen it adjusts it correctly – leaving all the pallettes, menus and tools correctly sized as they are on the retina display Is there some way to adjust the way Photoshop CC displays images so it is more consistent with what you actually see? There doesn't seem to be any answer on the Adobe forum, so hopefully someone here can shed some light. MacBook Pro with Retina display, 15", OS X Yosemite (10.10.2), Photoshop CC 2014

I tested both ways. With "open in low resolution" ckecked the size of the images is cool, but it is low-resolution including Photoshop appearance.
If "open in low resolution" is unckecked the appearance is good but the very small size.
See the image below. It has 650 x 732 px, 72 dpi. The font of the text "Neste aniversário ..." is with 18pt.

Best practice for external but secure access to internal data?

We need external customers/vendors/partners to access some of our company data (view/add/edit). It’s not so easy as to segment out those databases/tables/records from other existing (and put separate database(s) in the DMZ where our server is). Our
current solution is to have a 1433 hole from web server into our database server. The user credentials are not in any sort of web.config but rather compiled in our DLLs, and that SQL login has read/write access to a very limited number of databases.
Our security group says this is still not secure, but how else are we to do it? Even if a web service, there still has to be a hole in somewhere. Any standard best practice for this?
Thanks.

Security is mainly about mitigation rather than 100% secure, "We have unknown unknowns". The component needs to talk to SQL Server. You could continue to use http to talk to SQL Server, perhaps even get SOAP Transactions working but personally
I'd have more worries about using such a 'less trodden' path since that is exactly the areas where more security problems are discovered. I don't know about your specific design issues so there might be even more ways to mitigate the risk but in general you're
using a DMZ as a decent way to mitigate risk. I would recommend asking your security team what they'd deem acceptable.
http://pauliom.wordpress.com

Firefox is not remembering passwords for sites that i visit regularly. Ihave checked the box "remember passwords for sites" in the security tab under tools, but the passwords are not being remembered when I return to the sites.

Firefox is not remembering passwords for sites that i visit regularly. Ihave checked the box "remember passwords for sites" in the security tab under tools, but the passwords are not being remembered when I return to the sites. I am running v 3.6.18

Websites remembering you and automatically log you in is stored in a cookie.
* Create an allow cookie exception (Tools > Options > Privacy > Cookies: Exceptions) to keep such a cookie, especially for secure websites and if cookies expire when Firefox is closed.
Make sure that you do not run Firefox in Private Browsing mode.
* https://support.mozilla.com/kb/Private+Browsing
* In [[Private Browsing]] mode all cookies are session cookies that expire if that session is ended, so websites won't remember you.
* Do not use [[Clear Recent History]] to clear the "Cookies" and the "Site Preferences"
Clearing "Site Preferences" clears all exceptions for cookies, images, pop-up windows, software installation, and passwords.
* http://kb.mozillazine.org/Cookies

Hi, i am a littl confused as I logged into creative cloud and bough the in design plan for a year but i cant seem to donwload it... there is a window that pops up and it says its downloading but its taking forever? any advice?

hi, i am a littl confused as I logged into creative cloud and bough the in design plan for a year but i cant seem to donwload it... there is a window that pops up and it says its downloading but its taking forever? any advice?

Hi Dima,
Please refer to the help documents below:
Troubleshoot Creative Cloud download and install issues
Error downloading, installing, or updating Creative Cloud applications
Regards,
Sheena

I have install last update for i pod(ios5) but during installation there was one problem....i have restore my ipod and now i have lost all my buyed music!!Is not possible download it....?What are the details, including any error messages, related to your

I have install last update for i pod(ios5) but during installation there was one problem....i have restore my ipod and now i have lost all my buyed music!!Is not possible download it....?What are the details, including any error messages, related to your question?

Have you not got the music on your computer and/or on backups on, for example, external drives or CDs/DVDs ?

I do video productions for a small local TV station. I use Final Cut Express to edit. I need a new video camera but am at a loss as to what to buy. I know I will get a digital camera but do not know the difference between just digital and digital HD.

I do video productions for a small local TV station. I use Final Cut Express to edit. I need a new video camera but am at a loss as to what to buy. I know I will get a digital camera but do not know the difference between just digital and digital HD. Also, I can not afford an expensive camera and need some advice on which of the available cameras would be best and also work well with a Mac. One last issue, I currently use a Panasonic #CCD camera that takes a tape. When I load video to Final Cut the audio and video are out of sinc. Go figure. Can anyone help with these questions. Karen

Hello Karen,
If you are using Final Cut Express, then look for camcorders that are AVCHD camcorders. Look especially for the AVCHD logo and specific mention of AVCHD in the specs. Most of the major manufacturers produce good quality camdcorders - Canon, Sony, etc.
Also, be aware that there are a lot of "not quite AVCHD" camcorders on the market (sometimes they say they record video as MPEG4-H.264/AVC) - buyer beware!
Most everything you are going to find on the market today is HD, which stands for "high-def".
Regarding your question about the Panasonic camcorder, it's best if you post that as a separate question, and please identify the specific model camcorder and the Easy Setup you are using in FCE.

Trying to link large file to email. keep getting asked for master pw to security device. I have changed master pw on firefox and TB but still same response.

I have tried over and over to send this large file. I've never synced before so i got that all set up. Then asking for master passwork to security device. Don't think I had ever set up an account so did that and created password. When trying to send the email I ask to link it goes to 'box' and I authorize thunderbird to use use it. then it ask for master password and I type that in and it doesn't work. I have reset master pw for firefox and thunderbird and still can't get it to work. I really don't know what I am doing here so any help is greatly appreciated. Thanks!

In my previous response, I gave a link to this website page:
http://kb.mozillazine.org/Master_password
It contained some information about what to do if TB keeps asking for a 'Master Password' which was never set. This was an old bug that was resolved years ago, so it is surprising you are getting it assuming the Thunderbird Master Password was never set.
However, your comments are confusing because they are conflicting; in your question you say:
'' I have changed master pw on firefox and TB ''
This implies you set a master password in Thunderbird and changed it, but in last comment you say you never defined it:
'' I have used the Firefox direction to eliminate the master password, which I never defined in the first place,''
I'm not sure what you mean by 'I have used the Firefox direction' - perhaps you mean the link I gave. As of course we are not talking about firefox :)
So, at this point, it is hard to know what you did because you are posting conflicting information.
Using info at the link, I presume you tried this:
quote
''Thunderbird: Choose Tools -> Error Console, paste the expression: openDialog("chrome://pippki/content/resetpassword.xul") and press the Evaluate button. That will open a dialog asking you if you want to reset your password. ''
quote
''If that doesn't work exit Thunderbird and delete the '''key3.db''' file in your profile.''
Did you do this? You do not say if you did this.
At no point does it say uninstall Mozilla Thunderbird program, so I do not know why you would do it. Uninstalling the Program has nothing to do with your Profile for very obvious reasons.
'''More clearer instructions on how to delete the '''key3.db''' file.'''
Make hidden files and folders visible:
* http://kb.mozillazine.org/Show_hidden_files_and_folders
The AppData folder is folder is a hidden folder; to show hidden folders, open a Windows Explorer window and choose "Organize → Folder and Search Options → Folder Options → View (tab) → Show hidden files and folders".
Assuming your Profile was stored in the default place, it can be located here:
* C:\Users\Windows user name\AppData\Roaming\Thunderbird\Profiles\Profile name\
Thunderbird must be closed before doing anything in the Profile folders.
If you have since reinstalled Thunderbird, you can also use it to get quick access to your Profile folders.
In Thunderbird
* Help > Troubleshooting Information
* click on 'show folder' button
* '''Close/Exit Thunderbird - this is important'''
* Look for and delete this file : '''key3.db''' file.
* Restart Thunderbird.

Design for a small but secure installation

Similar Messages

Maybe you are looking for