Exchange & Outlook UPDATE, Outlook Edition, December 31, 2004

1. Commentary
- Managing Outlook Settings for Office 2003 SP1

2. Resources
- Outlook Tip: Preventing Out-of-Office Responses to Mailing Lists

3. New and Improved
- Protect Your Inbox
- Tell Us About a Hot Product and Get a T-Shirt!

~~~~ Sponsor: The Key to Stopping Email Attacks: Sender ID Can't Do It ~~~~
"Going nowhere fast," is how the media described recent efforts to develop an industry-wide email sender authentication standard. Even if some form of Sender ID is eventually adopted, spammers and hackers may be able to exploit the registration of IP addresses with Sender ID to improve their delivery of junk email. Effective real time IP address analysis and filtering is necessary — not sender authentication. This white paper explains why enterprises do not need to rely on Sender ID and discusses better, proven email intrusion prevention solutions that already work today to stop spam, viruses and email attacks. Get answers now!
http://www.windowsitpro.com/whitepapers/postini/unwantedemail/index.cfm?code=1231exch_P

Editor's note: Share Your Exchange Discoveries and Get $100
Share your Exchange Server and Outlook discoveries, comments, or problems and solutions for use in the Exchange & Outlook Administrator print newsletter's Reader to Reader column. Email your contributions (500 words or less) to [email protected]. We edit submissions for style, grammar, and length. If we print your submission, you'll get $100.

==== 1. Commentary: Managing Outlook Settings for Office 2003 SP1 ==== by Sue Mosher, News Editor, [email protected]

Microsoft Office 2003 Service Pack 1 (SP1) has been out since July 2004, so your organization probably has had time to test and deploy it and to incorporate it into your Office 2003 installations. What you might have overlooked is that Microsoft has also issued new policy template .adm files that make it easy to enforce new SP1 settings for Outlook and other Office programs. In addition, there are new .opa files, which the Office Resource Kit's Custom Installation Wizard (CIW) and Custom Maintenance Wizard (CMW) use to set user defaults that you don't want to mandate through Group Policy Objects (GPOs). The real bonus, though, is that Microsoft has developed a pair of Microsoft Excel worksheets that list all the policy and UI options in the SP1 versions of all the Office programs. You can use these worksheets to help decide which settings you want to deploy as default user preferences by using the CIW or CMW and which settings you want to lock down by using GPOs. All these resources are available in a single download from the Microsoft Web site (see the first URL below).

When you download and run the executable, you can choose to extract the policy template files to any folder on your system. Move the extracted .opa files to the \program files\orktools\ork11\tools\shared folder on the machine on which you run the CIW and CMW to build your deployment .mst transform files and maintenance .cmw files. (You might want to back up your original .opa files to another location before you put the new files in place.) From that point on, the CIW and CMW will use the new settings collection from the .opa files.

To replace the policy templates, you first need to remove the old Office 2003 policy templates. In the Group Policy Editor, right-click Administrative Templates, then choose Add/Remove Templates. Choose to remove all the Office 2003 templates. (You might then want to copy them out of the \windows\inf or \winnt\inf folder--whichever is appropriate on your system--to a backup location.) Copy the new .adm files to the same \inf folder. You can then add the Outlk11.adm template for Outlook 2003, for example, to the templates displayed in the Group Policy Editor.

As far as the Excel worksheets go, each worksheet lets you browse the available options in a different way. The Office 2003 UI Options.xls worksheet walks through not just the settings that users can configure in Tools, Options, but also lists settings available on some other menus. A separate column lists the registry value associated with each setting (when available), whereas other columns list default and other allowable registry values. Similarly, the Office 2003 Group Policies.xls worksheet shows all the available Group Policy and CIW or CMW settings, arranged in the same order that you see them in the hierarchy under Administrative Templates in the Group Policy Editor.

In both spreadsheets, the Policy? and CIW? columns tell you which options you can configure through GPOs and with the CIW or CMW. The New? and SP1? columns tell you which feature settings are new in Office 2003 itself and which are new in Office 2003 SP1. Excel's AutoFilter feature makes it easy to filter the spreadsheet to show just the SP1 changes. (There are no new UI settings listed for Outlook for SP1.) But before you do that, I suggest that you color-code each Office product (or at least the ones you're interested in) so that you know what you're looking at in the filter. Filtering for all new SP1 settings hides the row that tells you which product you're looking at. For example, Outlook 2003's settings are in rows 1016 through 1679 in the Office 2003 Group Policies.xls worksheet. If you select those rows, then apply a yellow fill color to them, when you filter only SP1 items, you'll know that the yellow ones belong to Outlook.

To activate the AutoFilter feature, click anywhere in row 1 of the worksheet, then choose Data, Filter, AutoFilter. To show only SP1 items, click the down arrow in the column labeled SP1? (column M in the Office 2003 Group Policies.xls file) and choose Yes. You should see several Outlook settings that can now be configured through GPOs (although not by using the CIW or CMW). For example, the Level1Add value for blocking more types of file attachments in Outlook items is available in SP1 as a policy setting that controls that value in the HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Office\11.0\Outlook\Security registry entry. It works just like Level1Remove, taking a semicolon-delimited list of file-type extensions that you don't want users to be able to access in email messages.

With these two spreadsheets, you can get a much clearer idea of what settings are under administrative control than you'd get clicking through the UI or the Group Policy Editor. Don't forget to examine the general Office settings, where you'll find options that affect Outlook's integration with Windows SharePoint Services and the behavior of WordMail (i.e., Word as Outlook's email editor).

Office 2003 SP1 Policy Template Files
http://download.microsoft.com/download/9/5/f/95f7e000-d7ab-4b86-8a5d-804b124c7a69/Office-2003-SP1-ADMs-OPAs-and-Explain-Text.exe

Office 2003 Resource Kit--Managing Users' Configurations by Policy
http://office.microsoft.com/search/redir.aspx?AssetID=HA011402401033

~~~~ Sponsor: Free White Paper: High Availability for Windows Services ~~~~
It is no stretch to say that Windows high availability must be a fundamental element in your short- and long-term strategic IT planning. This free white paper discusses the core issues surrounding Windows high availability, with a focus on business drivers and benefits. You'll learn about the current market solutions, technologies and real-world challenges including cost-benefit analyses. Plus, find out how to assess technical elements required in choosing a high availability solution, including the robustness of the technology, time-to-failover, and implementation difficulties. Download this white paper now!
http://www.windowsitpro.com/whitepapers/neverfail/highavailability/index.cfm?code=1231exch_s

==== Announcements ==== (from Windows IT Pro and its partners)

Get the Cliffs Notes to Migrating from Novell NDS to Windows Server 2003
Migrating from Novell NDS to Windows Server 2003 means moving from an established directory service to the latest version of Active Directory. Missing a step in the migration process could mean real problems. Use our quick reference guide as a cheat-sheet to help you manage each step of the migration process. Download the guide now.
http://www.windowsitpro.com/essential/index.cfm?code=1227emailannc

Sensible Best Practices for Exchange Availability Web Seminar--January 27
If you're discouraged about not having piles of money for improving the availability of your Exchange server, join Exchange MVP Paul Robichaux for this free Web seminar and learn how to maximize your existing configuration. Survive unexpected outages, plan for the unplannable, and evaluate what your real business requirements are without great expense. Register now!
http://www.windowsitpro.com/seminars/exchangeavailability/index.cfm?code=103emailannc

Are You a Hacker Target?
You are if you have an Internet connection faster than 384Kbps. In this free on-demand Web seminar, Alan Sugano will examine two attacks (an SMTP Auth Attack and a SQL Attack) that let spammers get into the network and relay spam. Find out how to keep the hackers out of your network and what to do if your mail server is blacklisted as an open relay. Register now!
http://www.windowsitpro.com/seminars/antispam/index.cfm?code=1227emailannc

Token Authentication: Getting It Right
More and more companies are taking the first steps toward leaving passwords behind and implementing tokens for at least a portion of their users and systems. In this free on-demand Web seminar, join Randy Franklin Smith to find out the advantages of implementing token-based Reduced Sign-On (RSO) and learn how you can you make a solid business case to management that justifies the costs. Get valuable checklists of key evaluation and testing points and critical success factors for rollout time. Register now!
http://www.windowsitpro.com/seminars/tokenauthentication/index.cfm?code=1227emailannc

==== 2. Resources ====

Outlook Tip: Preventing Out-of-Office Responses to Mailing Lists by Sue Mosher, [email protected]
Q: How can I prevent out-of-office responses from being returned to distribution lists (DLs) and other mailing lists?
Find the answer (and links to more great tips) at http://www.windowsitpro.com/article/articleid/42533/42533.html

==== Events Central ==== (A complete Web and live events directory brought to you by Windows IT Pro: http://www.windowsitpro.com/events )

Get Expert Advice on Implementing a Service Management Plan
Our expert panel delivers tips, techniques, and insight to get you closer to a service management plan in this free on-demand Web seminar. Get real-world perspectives on industry trends and examples of how to leverage service management for maximum results and how to implement a plan for your business. Register now!
http://www.windowsitpro.com/seminars/serviceroadmap/index.cfm?code=1227emailannc

==== 3. New and Improved ==== by Angie Brew, [email protected]

Protect Your Inbox
DS Development released Email Sentinel Pro 2.7, a utility that blocks attachments, scripts, images, and spamming techniques before they reach your Inbox. The product can convert email messages to text messages to help block viruses and automatically creates backup copies of the original messages. Email Sentinel Pro creates traffic reports about the number of incoming email messages and attachments. The product features a whitelist that supports Outlook and MSN contacts. Email Sentinel Pro costs $14.95. Contact DS Development at [email protected].
http://www.emailaddressmanager.com

Tell Us About a Hot Product and Get a T-Shirt!
Have you used a product that changed your IT experience by saving you time or easing your daily burden? Tell us about the product, and we'll send you a T-shirt if we write about the product in a future Windows IT Pro What's Hot column. Send your product suggestions with information about how the product has helped you to [email protected].

==== Sponsored Link ====

Data Protection from NSI and Microsoft
Instant recovery and data protection solutions for Exchange and SQL servers
http://ad.doubleclick.net/clk;12746138;8214395;l?http://www.protect-your-data.com

~~~~ Contact Us ~~~~

About the newsletter -- [email protected]
About technical questions -- http://www.windowsitpro.com/forums
About product news -- [email protected]
About your subscription -- [email protected]
About sponsoring UPDATE -- [email protected]