¡ÒÃáÁ»¡ÒþÍÃ쵤§ exchange Server

º·¤ÇÒÁ¹Õé͸ԺÒÂÇÔ¸Õ¡Òà statically áÁ»¾ÍÃìµµèÒ§ æ ·Õè¤ÍÁ¾ÔÇàµÍÃìä¤Åà͹µì MAPI ÃØ蹡è͹ãªé¡ÒÃàª×èÍÁµèͼèÒ¹ä¿ÃìÇÍÅÅìä»Âѧà«ÔÃì¿àÇÍÃì·Õè¡ÓÅѧàÃÕ¡ãªé 5.5 à«ÔÃì¿àÇÍÃì Exchange ¢Í§ Microsoft, Microsoft Exchange 2000 Server ËÃ×Í Microsoft Exchange Server 2003 ¤ÍÁ¾ÔÇàµÍÃìä¤Åà͹µì MAPI ÃØ蹡è͹˹éÒÃÇÁäÇé㹤ÍÁ¾ÔÇàµÍÃìä¤Åà͹µì¢Í§ Exchange Server áÅФÍÁ¾ÔÇàµÍÃìä¤Åà͹µì·Õèãªé Microsoft Outlook ã¹âËÁ´ Corporate ËÃ×Í Workgroup ¹Í¡¨Ò¡¹Õé º·¤ÇÒÁ¹Õé͸ԺÒÂÇÔ¸Õ¡ÒÃáÁ»¾ÍÃìµã¹à«ÔÃì¿àÇÍÃìã¹à¤Ã×Í¢èÒÂ㹢ͺࢵ (àÃÕ¡ÍÕ¡ÍÂèÒ§ÇèÒ DMZ ⫹ demilitarized áÅÐà¤Ã×Í¢èÒÂÂèÍ screened) ˹éÒ statically ÊÀÒ¾áÇ´ÅéÍÁ¢Í§ÍÕà·ÍÃìà¹çµà¾×èÍãËé¤ÍÁ¾ÔÇàµÍÃìÊÒÁÒöà¢éÒÊÙèÃкºà¤Ã×Í¢èÒ áÅСÒÃÊ×èÍÊÒáѺà«ÔÃì¿àÇÍÃìÊÔé¹ÊØ´ËÅѧ

ÊÔè§ÊӤѭ¹ÕéÊèǹ ÇÔ¸Õ ËÃ×ͧҹ»ÃСͺ´éÇ¢Ñ鹵͹·ÕèºÍ¡ÇÔ¸Õ¡ÒÃá¡éä¢ÃÕ¨ÔÊ·ÃÕ ÍÂèÒ§äáçµÒÁ »Ñ­ËÒÃéÒÂáçÍÒ¨à¡Ô´¢Öé¹ËÒ¡¤Ø³»ÃѺà»ÅÕè¹ÃÕ¨ÔÊ·ÃÕäÁè¶Ù¡µéͧ ´Ñ§¹Ñé¹ â»Ã´µÃǨÊͺãËéá¹èã¨ÇèҤسä´é·ÓµÒÁ¢Ñ鹵͹àËÅèÒ¹ÕéÍÂèÒ§ÃÐÁÑ´ÃÐÇѧ ÊÓËÃѺ¡Òûéͧ¡Ñ¹à¾ÔèÁàµÔÁ ãËéÊÓÃͧÃÕ¨ÔÊ·ÃÕ¡è͹·Ó¡ÒûÃѺà»ÅÕè¹ à¾×èÍ·Õè¤Ø³¨ÐÊÒÁÒö¤×¹¤èÒÃÕ¨ÔÊ·ÃÕä´éËÒ¡ÁջѭËÒà¡Ô´¢Öé¹ ÊÓËÃѺ¢éÍÁÙÅà¾ÔèÁàµÔÁà¡ÕèÂǡѺÇÔ¸Õ¡ÒÃÊÓÃͧ¢éÍÁÙÅáÅФ׹¤èÒÃÕ¨ÔÊ·ÃÕ â»Ã´¤ÅÔ¡·ÕèËÁÒÂàÅ¢º·¤ÇÒÁµèÍ仹Õé à¾×èÍ´Ùº·¤ÇÒÁã¹°Ò¹¤ÇÒÁÃÙé¢Í§ Microsoft::

¡ÒÃáÁ»¡ÒþÍÃìµáºº¤§·ÕèÊÓËÃѺ¤ÍÁ¾ÔÇàµÍÃìä¤Åà͹µì MAPI àª×èÍÁµè͡Ѻ Exchange 2000 Server ËÃ×Í Exchange Server 2003 ¼èÒ¹ä¿ÃìÇÍÅÅì

àÁ×è͵éͧ¡ÒÃà»Ô´¡ÒÃãªé§Ò¹¤ÍÁ¾ÔÇàµÍÃìä¤Åà͹µì MAPI ÃØ蹡è͹˹éÒ¹Õé㹡ÒÃàª×èÍÁµè͡Ѻ Exchange 2000 Server ËÃ×Í Exchange Server 2003 ¼èÒ¹ä¿ÃìÇÍÅÅì à¾ÔèÁÃÒ¡ÒÃÃÕ¨ÔÊ·ÃÕà¾×èÍ·Ó¡ÒþÍÃìµµèÒ§ æ ·Õè¡Ó˹´ãËé¡Ñº¡ÒÃàª×èÍÁµèÍ仹ÕéẺ¤§·Õè â´ÂãËé·ÓµÒÁ¢Ñ鹵͹µèÍ仹Õé::

1. àÃÔèÁâ»Ãá¡ÃÁ Registry Editor
2. ¤é¹ËÒ áÅФÅÔ¡à¾×èÍàÅ×Í¡¤ÕÂìµèÍ仹Õé:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeSA\Parameters
3. à¾ÔèÁÃÒ¡ÒõèÍ仹ÕéÊÓËÃѺ RFR SA ¢Í§ Exchange Microsoft ÍÔ¹à·ÍÃìà¿«:
   ª×èͤèÒ: ¾ÍÃìµ TCP/IP
   ¤èÒª¹Ô´: REG_DWORD
   ¢éÍÁÙŤèÒ::ËÁÒÂàÅ¢¾ÍÃìµà¾×èÍ·Õè¶Ù¡¡Ó˹´ãËé ã¹ÃٻẺàÅ¢°Ò¹ÊÔº
   µÃǨÊͺãËéá¹èã¨ÇèÒ ¤Ø³ä´é¡Ó˹´¾ÍÃìµÍ×è¹ã¹¡ÒõÑ駤èÒáµèÅФÕÂìÃÕ¨ÔÊ·ÃÕ ¶éҤسàÃÕ¡ãªé¡ÒÃnetstat - ¡ÒäÓÊÑè§Ë¹éҨ;ÃéÍÁÃѺ¤ÓÊÑè§ ¤Ø³ÊÒÁÒö´Ù¡ÒÃàª×èÍÁµèÍ TCP/IP áÅоÍÃ쵡ÒÃÃѺ·Ñé§ËÁ´ã¹ÃٻẺµÑÇàÅ¢ ¤Ø³µéͧãªé¾ÍÃìµ·ÕèÁÕäÁèä´éãªéÊÓËÃѺ¡ÒÃáÁ»áºº¤§·Õè
   
   ÊÓËÃѺ¢éÍÁÙÅà¾ÔèÁàµÔÁà¡ÕèÂǡѺ¤Óá¹Ð¹ÓÊÓËÃѺ¡ÒáÓ˹´¤èÒ¾ÍÃìµáºº¤§·Õè¢Í§ Exchange Server ¤ÅÔ¡ËÁÒÂàÅ¢º·¤ÇÒÁµèÍ仹Õéà¾×èÍ´Ùº·¤ÇÒÁã¹°Ò¹¤ÇÒÁÃÙé¢Í§ Microsoft:
   154596

   (http://support.microsoft.com/kb/154596/ )

   ÇÔ¸Õ¡ÒõÑ駤èҤ͹¿Ô¡¡ÒûѹÊèǹ䴹ÒÁÔ¡¾ÍÃìµ RPC ·Ó§Ò¹¡Ñºä¿ÃìÇÍÅÅì
4. ¤é¹ËÒ áÅФÅÔ¡à¾×èÍàÅ×Í¡¤ÕÂìµèÍ仹Õé:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeSA\Parameters
5. à¾ÔèÁ¤èÒÃÕ¨ÔÊ·ÃÕµèÍ仹ÕéÊÓËÃѺ Microsoft Exchange ÍÔ¹à·ÍÃìà¿«ÊÓËÃѺ¾ÃçÍ¡«Õ NSPI ä´àáµÍÃÕ:
   ª×èͤèÒ: ¾ÍÃìµ NSPI TCP/IP
   ¤èÒª¹Ô´: REG_DWORD
   ¢éÍÁÙŤèÒ::ËÁÒÂàÅ¢¾ÍÃìµà¾×èÍ·Õè¶Ù¡¡Ó˹´ãËé ã¹ÃٻẺàÅ¢°Ò¹ÊÔº
6. ¤é¹ËÒ áÅФÅÔ¡à¾×èÍàÅ×Í¡¤ÕÂìµèÍ仹Õé:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeIS\ParametersSystem
7. à¾ÔèÁ¤èÒÃÕ¨ÔÊ·ÃÕµèÍ仹ÕéÊÓËÃѺÍÔ¹à·ÍÃìà¿«¡ÒÃà¡çº¢éÍÁÙÅ Exchange ¢Í§ Microsoft:
   ª×èͤèÒ: ¾ÍÃìµ TCP/IP
   ¤èÒª¹Ô´: REG_DWORD
   ¢éÍÁÙŤèÒ::ËÁÒÂàÅ¢¾ÍÃìµà¾×èÍ·Õè¶Ù¡¡Ó˹´ãËé ã¹ÃٻẺàÅ¢°Ò¹ÊÔº
8. ¤é¹ËÒ áÅФÅÔ¡à¾×èÍàÅ×Í¡¤ÕÂìµèÍ仹Õé:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeSRS\Parameters
9. à¾ÔèÁ¤èÒÃÕ¨ÔÊ·ÃÕµèÍ仹ÕéÊÓËÃѺ Microsoft Exchange ºÃÔ¡ÒèÓÅͧẺ䫵ì (SRS):
   ª×èͤèÒ: TCP/IP
   ¤èÒª¹Ô´: REG_DWORD
   ¢éÍÁÙŤèÒ::ËÁÒÂàÅ¢¾ÍÃìµà¾×èÍ·Õè¶Ù¡¡Ó˹´ãËé ã¹ÃٻẺàÅ¢°Ò¹ÊÔº
10. ÍÍ¡¨Ò¡ "µÑÇá¡éä¢ÃÕ¨ÔÊ·ÃÕ"
11. àÃÔèÁµé¹Ãкº¤ÍÁ¾ÔÇàµÍÃìãËÁè

ËÅѧ¨Ò¡·Õè¤Ø³ä´é´Óà¹Ô¹¡ÒâÑ鹵͹àËÅèÒ¹Õé ¡Ó˹´¤èÒµÑÇ¡Ãͧᾤà¡çµËÃ×Íä¿ÃìÇÍÅÅì·Õèà»Ô´ãªé§Ò¹¡ÒÃàª×èÍÁµèÍ TCP ¨Ð¶Ù¡·Óà¾×è;ÍÃìµ 135 ÊÓËÃѺºÃÔ¡Òà Attendant Ãкº Exchange Microsoft áÅоÍÃìµµèÒ§ æ ·Õè¤Ø³¡Ó˹´ã¹¢Ñ鹵͹·Õè 3, 5, 7 áÅÐ 9

¶éҤس·Ó¡ÒÃà»ÅÕè¹á»Å§àËÅèÒ¹Õ麹à«ÔÃì¿àÇÍÃì·Õè¡ÓÅѧàÃÕ¡ãªé Exchange 2000 Server ËÃ×Í Exchange Server 2003 áÅзÕèÁÕ¡ÒõԴµÑ駺¹à«ÔÃì¿àÇÍÃìá¤çµµÒÅçÍ¡Êèǹ¡ÅÒ§ ·ÓµÒÁ¢Ñ鹵͹àËÅèÒ¹Õé:

1. àÃÔèÁâ»Ãá¡ÃÁ Registry Editor
2. ¤é¹ËÒ áÅФÅÔ¡à¾×èÍàÅ×Í¡¤ÕÂìµèÍ仹Õé:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters
3. à¾ÔèÁ¤èÒÃÕ¨ÔÊ·ÃÕµèÍ仹Õé::
   ª×èͤèÒ: ¾ÍÃìµ TCP/IP
   ¤èÒª¹Ô´: REG_DWORD
   °Ò¹: àÅ¢°Ò¹ÊÔº
   ¢éÍÁÙŤèÒ::ËÁÒÂàÅ¢¾ÍÃìµà¾×èÍ·Õè¶Ù¡¡Ó˹´ãËé ã¹ÃٻẺàÅ¢°Ò¹ÊÔº
4. ÍÍ¡¨Ò¡ "µÑÇá¡éä¢ÃÕ¨ÔÊ·ÃÕ"

àÃÔèÁµé¹à«ÔÃì¿àÇÍÃìá¤çµµÒÅçÍ¡Êèǹ¡ÅÒ§à¾×èÍãËéÍèÒ¹¡ÒÃáÁ»áºº¤§·ÕèàÁ×èÍÁÕ¡ÒÃàµÃÕÂÁãªé§Ò¹ª×èͺÃÔ¡ÒüÙéãËéºÃÔ¡ÒÃÍÔ¹à·ÍÃìà¿« (NSPI)

ËÁÒÂà˵Ø:ËÁÒÂàÅ¢¾ÍÃìµ·ÕèàÅ×Í¡¤ÇÃäÁè¢Ñ´áÂ駡Ѻâ»Ãá¡ÃÁÍ×è¹ ¶éÒËÁÒÂàÅ¢¾ÍÃìµ·Õè¢Ñ´áÂ駡Ѻâ»Ãá¡ÃÁÍ×è¹ NSPI ¨ÐäÁèàÃÔèÁ·Ó§Ò¹

¡ÒÃáÁ»¡ÒþÍÃìµáºº¤§·ÕèÊÓËÃѺ¤ÍÁ¾ÔÇàµÍÃìä¤Åà͹µì MAPI à¾×èÍàª×èÍÁµè͡Ѻ Exchange Server 5.5 ¼èÒ¹ä¿ÃìÇÍÅÅì

To enable earlier-version MAPI client computers to connect to Exchange Server 5.5 through a firewall, add entries to the registry to make the ports that are assigned to these connections static. â´ÂãËé·ÓµÒÁ¢Ñ鹵͹µèÍ仹Õé::

1. àÃÔèÁâ»Ãá¡ÃÁ Registry Editor
2. Locate and then click to select the following subkey:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeDS\Parameters
3. à¾ÔèÁ¤èÒÃÕ¨ÔÊ·ÃÕµèÍ仹Õé::
   Value name: TCP/IP Port
   ¤èÒª¹Ô´: REG_DWORD
   Base: Decimal
   Value data: 5000
   ËÁÒÂà˵Ø:We recommend that you assign ports in the 5000 - 65535 (decimal) range.For more information about the guidelines for static port assignments of Exchange Server services, click the following article number to view the article in the Microsoft Knowledge Base:
   154596

   (http://support.microsoft.com/kb/154596/ )

   How to configure RPC dynamic port allocation to work with firewalls
4. Locate and then click to select the following subkey:
   System\CurrentControlSet\Services\MSExchangeIS\ParametersSystem
5. à¾ÔèÁ¤èÒÃÕ¨ÔÊ·ÃÕµèÍ仹Õé::
   Value name: TCP/IP Port
   ¤èÒª¹Ô´: REG_DWORD
   Base: Decimal
   Value data: 5001
   ËÁÒÂà˵Ø:We recommend that you assign ports in the 5000 - 65535 (decimal) range.For more information about the guidelines for static port assignments of Exchange Server services, click the following article number to view the article in the Microsoft Knowledge Base:
   154596

   (http://support.microsoft.com/kb/154596/ )

   How to configure RPC dynamic port allocation to work with firewalls
6. ÍÍ¡¨Ò¡ "µÑÇá¡éä¢ÃÕ¨ÔÊ·ÃÕ"
7. àÃÔèÁµé¹Ãкº¤ÍÁ¾ÔÇàµÍÃìãËÁè

After you complete these steps, configure the packet filter or firewall to allow for Transmission Control Protocol (TCP) connections to be made to port 135 for the Microsoft Exchange System Attendant service, and the ports that you assigned in steps 3 and 5.

Statically map the ports for a front-end server in a perimeter network Ethernet environment so that the computer can log on to the network and communicate with the back-end servers

To install Exchange Server 2003 or Exchange 2000 Server on computers that are isolated from their Microsoft Windows Server 2003 or Microsoft Windows 2000 networks by a firewall and that are in a perimeter network Ethernet environment, follow these steps:

1. To enable Windows Server 2003-based computers or Windows 2000-based computers to log on to the domain through the firewall, open the following ports for incoming traffic:
   • 53 (Transmission Control Protocol [TCP], User Datagram Protocol [UDP]) - Domain Name System (DNS).
   • 80 (TCP) - ¨Óà»ç¹ÊÓËÃѺ¡ÒÃà¢éÒ¶Ö§¢Í§ Outlook Web Access ÊÓËÃѺ¡ÒÃÊ×èÍÊÒÃÃÐËÇèÒ§à«ÔÃì¿àÇÍÃì Exchange ˹éÒ áÅСÒÃÊÔé¹ ÊØ´ËÅѧ
   • 88 (Ê觤Ǻ¤ØÁ Protocol [TCP], UDP) - ¡ÒÃÃѺÃͧ¤ÇÒÁ¶Ù¡µéͧ¢Í§ Kerberos
   • 123 (UDP) - â¾Ãâ·¤ÍÅ¡Òëԧâ¤Ãä¹ÊìàÇÅÒ Windows (NTP) ¹ÕéäÁè¨Óà»ç¹ÊÓËÃѺ¤ÇÒÁÊÒÁÒö㹡ÒÃà¢éÒÊÙèÃкº Windows 2000 ÍÂèÒ§äáçµÒÁ ´Ñ§¡ÅèÒÇÍÒ¨¶Ù¡¡Ó˹´¤èÒäÇé ËÃ×ͨÓà»ç¹ â´Â¼Ùé´ÙáÅÃкºà¤Ã×Í¢èÒÂ
   • 135 (TCP) - EndPointMapper
   • 389 (TCP, UDP) - â¾Ãâ·¤ÍÅ¡ÒÃà¢éÒ¶Ö§ä´àá·ÍÃÕ Lightweight (LDAP)
   • 445 (TCP) - Server ¢éͤÇÒÁºÅçÍ¡ (SMB) ÊÓËÃѺ Netlogon ¡ÒÃá»Å§ LDAP áÅÐ Microsoft ᨡ¨èÒ File System (DFS) ¤é¹ËÒ
   • 3268 (TCP) - LDAP à«ÔÃì¿àÇÍÃìá¤çµµÒÅçÍ¡Êèǹ¡ÅÒ§
   • ¾ÍÃìµ·Õè˹Öè§ÊÓËÃѺÍÔ¹à·ÍÃìà¿«ä´àá·ÍÃÕ·Õèãªé§Ò¹ÍÂÙèà¢éÒÊÙèÃкºáÅÐä´àá·ÍÃÕ·Õè¨ÓÅͧẺÊÓËÃѺ (µÑÇÃкطÕèäÁè«éӡѹ universally [UUIDs 12345678-1234-abcd-ef00-01234567cffb áÅÐ 3514235 4b06 11 Ç 1-ab04-00c04fc2dcd2) â´Â·ÑèÇ仫Ö觶١¡Ó˹´ãËé¾ÍÃìµ 1025 ËÃ×Í 1026 ÃÐËÇèÒ§¡ÒÃàÃÔèÁµé¹ ¤èÒ¹ÕéäÁèä´é¶Ù¡¡Ó˹´ã¹â¤é´µé¹©ºÑº DSProxy ËÃ×ÍÃкº Attendant (MAD) ´Ñ§¹Ñé¹ ¤Ø³µéͧáÁ»¾ÍÃìµã¹ÃÕ¨ÔÊ·ÃÕº¹µÑǤǺ¤ØÁâ´àÁ¹ã´ æ ·ÕèµéͧµÔ´µèÍ Exchange server ¼èÒ¹ä¿ÃìÇÍÅÅì¡ÒûÃÐÁÇżŠlogons áÅéÇ à»Ô´¾ÍÃìµã¹ä¿ÃìÇÍÅÅì
     
     àÁ×è͵éͧ¡ÒÃáÁ»¾ÍÃìµã¹ÃÕ¨ÔÊ·ÃÕ ´Óà¹Ô¹¡ÒôѧµèÍ仹Õé:
     1. àÃÔèÁâ»Ãá¡ÃÁ Registry Editor
     2. ¤é¹ËÒ áÅФÅÔ¡à¾×èÍàÅ×Í¡¤ÕÂìµèÍ仹Õé:
        HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters
     3. à¾ÔèÁ¤èÒÃÕ¨ÔÊ·ÃÕµèÍ仹Õé::
        ª×èͤèÒ: ¾ÍÃìµ TCP/IP
        ¤èÒª¹Ô´: REG_DWORD
        °Ò¹: àÅ¢°Ò¹ÊÔº
        ¤èÒ:¤èÒ·ÕèÁÒ¡¡ÇèÒ 1024
     4. ÍÍ¡¨Ò¡ "µÑÇá¡éä¢ÃÕ¨ÔÊ·ÃÕ"
     µÃǨÊͺãËéá¹èã¨ÇèÒ à¤Ã×èͧËÁÒ·Ѻ㹠"TCP/IP" äÁèÁÕà¤Ã×èͧËÁÒ·Ѻ仢éҧ˹éÒ ¹Í¡¨Ò¡¹Õé µÃǨÊͺãËéá¹èã¨ÇèÒ ¤Ø³ä´é¡Ó˹´¤èÒ·Õè 1024 (°Ò¹ÊÔº) ÁÒ¡¡ÇèÒ ËÁÒÂàÅ¢¹ÕéÁÕ¾ÍÃìµà¾ÔèÁàµÔÁ·Õè¤Ø³µéͧà»Ô´ (TCP, UDP) ã¹ä¿ÃìÇÍÅÅì ¡ÒõÑ駤èÒ¤èÒÃÕ¨ÔÊ·ÃÕ¹Õé·ÕèµÑǤǺ¤ØÁâ´àÁ¹·Ñé§ËÁ´ÀÒÂã¹ä¿ÃìÇÍÅÅìäÁèÁռŵèÍ»ÃÐÊÔ·¸ÔÀÒ¾¡Ò÷ӧҹ ¹Í¡¨Ò¡¹Õé ¡ÒÃà«çµ¤èÒÃÕ¨ÔÊ·ÃÕ¹Õé¤Ãͺ¤ÅØÁã´ æ redirects Ãéͧ¢Í¡ÒÃà¢éÒÊÙèÃкº·Õèà¡Ô´¢Öé¹à¹×èͧ¨Ò¡à«ÔÃì¿àÇÍÃì·Õè¨Ðŧ º·ºÒ··Õèà»ÅÕè¹á»Å§ ËÃ×Í¢éÍ¡Ó˹´¢Í§áº¹´ìÇÔ¸
   ËÁÒÂà˵Ø
   • ÊÓËÃѺà«ÔÃì¿àÇÍÃìÀÒÂã¹ä¿ÃìÇÍÅÅìÊÒÁÒöÊ×èÍÊÒüèÒ¹ä¿ÃìÇÍÅÅìä»Âѧà«ÔÃì¿àÇÍÃìÀÒ¹͡ ¤Ø³µéͧÁÕ¾ÍÃìµ 1024 ¼èÒ¹ 65535 㹡ÒáÓ˹´¤èÒÊÓËÃѺ¡ÒõԴµèÍÊ×èÍÊÒ÷ÕèÍÍ¡ ¤ÍÁ¾ÔÇàµÍÃì·ÕèàÃÔèÁµé¹¡ÒÃÊ×èÍÊÒüèÒ¹ä¿ÃìÇÍÅÅìãªé¾ÍÃìµ½Ñè§ä¤ÅàÍç¹µì·Õè¡Ó˹´ãËéà»ç¹áººä´¹ÒÁÔ¡ áÅÐäÁèÊÒÁÒö¡Ó˹´¤èÒ
   • Windows 2000 ãªéẺ¿ÍÃìÁÅӴѺ¢Í§ TCP/IP ping Ãéͧ¢Íä»Âѧà«ÔÃì¿àÇÍÃì»ÅÒ·ҧàÁ×èͤÍÁ¾ÔÇàµÍÃì·Õèãªé Windows 2000 Server ÁÕÅçÍ¡Í͹â´àÁ¹¼èÒ¹ä¿ÃìÇÍÅÅì windows 2000 äÁèãËéµÃǨÊͺÇèÒ ¤ÍÁ¾ÔÇàµÍÃìẺä¤ÅàÍç¹µìäÁè͹حҵ¡ÒÃà¢éÒ¶Ö§µÑǤǺ¤ØÁâ´àÁ¹º¹¡ÒÃàª×èÍÁ⧪éÒàÁ×è͵éͧ ¡ÒÃãªé Group Policy ËÃ×Í´ÒǹìâËÅ´â»Ãä¿Åì¼Ùéãªé¢éÒÁࢵ¹Õé
2. µÔ´µÑé§ Exchange Server 2003 ËÃ×Í Exchange 2000 Server 㹤ÍÁ¾ÔÇàµÍÃì·ÕèãªéÀÒ¹͡ ¤Ø³äÁè¨Óà»ç¹µéͧÁÕ¾ÍÃìµ·ÕèÁÒ¡¡ÇèÒà»Ô´¡ÒõԴµÑé§ Exchange Server 2003 ËÃ×Í Exchange 2000 Server 㹤ÍÁ¾ÔÇàµÍÃì·ÕèãªéÀÒ¹͡
3. Configure Exchange Server 2003 or Exchange 2000 Server front-end and back-end connectivity. Exchange Server 2003 or Exchange 2000 Server front-end and back-end connectivity only requires that other ports be open as required for whatever communication is appropriate. For example, Web client front-end and back-end connectivity requires port 80 [TCP] open, IMAP 143 [TCP], and so on. Additionally, any connectivity by secure protocols, such as Ipsec or Secure Sockets Layer (SSL)-secured HTTP, Internet Message Access Protocol (IMAP), or Post Office Protocol version 3 (POP3), that you need requires additional configuration that is not specified in this article. If the front-end server in the perimeter network has a different subnet, make sure that you add that subnet in the Active Directory Sites and Services snap-in.
   
   ËÁÒÂà˵Ø:You do not have to add the subnet if you have not created a separate subnet object in Active Directory Sites and Services.
   
   
   In a perimeter network Ethernet environment, you must also define TCP/IP routes from the computer in the perimeter network Ethernet environment to every computer in the internal network that you must communicate with.
   
   ËÁÒÂà˵Ø:In a perimeter network firewall scenario, there is no Internet Control Message Protocol (ICMP) connectivity between the Exchange server and the domain controllers. By default, Directory Access (DSAccess) uses ICMP to ping each server to which it connects to determine whether the server is available. When there is no ICMP connectivity, Directory Access responds as if every domain controller were unavailable.For more information about how to turn off the Directory Access ping by creating a registry key, click the following article numbers to view the articles in the Microsoft Knowledge Base:
   320529

   (http://support.microsoft.com/kb/320529/ )

   Using DSAccess in a perimeter network firewall scenario requires a registry key setting
   320228

   (http://support.microsoft.com/kb/320228/ )

   The "DisableNetLogonCheck" registry value and how to use it

How to configure Microsoft Exchange Server 5.5 Outlook Web Access to connect to Exchange Server 5.5 through a firewall

To install Exchange Server 5.5 Outlook Web Access on the external computer that is directed at a Microsoft Exchange Server 5.5 server that is running inside the perimeter network and a firewall, you must open the Windows 2000 or Windows Server 2003 ports that were mentioned at the start of the "Statically map the ports for a front-end server in a perimeter network Ethernet environment so that the computer can log on to the network and communicate with the back-end servers" section. Additionally, you need static mappings for the Exchange Server 5.5 directory service (UUID f5cc5a18-4264-101a-8c59-08002b2f8426), the Microsoft Exchange Information Store service (UUID a4f1db00-ca47-1067-b31f-00dd010662da), and the System Attendant (UUID 469d6ec0-0d87-11ce-b13f-00aa003bac6c).

To configure the RPC port for the Microsoft Exchange Directory Service, follow these steps:

1. àÃÔèÁâ»Ãá¡ÃÁ Registry Editor
2. Locate and then click to select the following registry subkey:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeDS\Parameters
3. à¾ÔèÁ¤èÒÃÕ¨ÔÊ·ÃÕµèÍ仹Õé::
   ª×èͤèÒ: ¾ÍÃìµ TCP/IP
   ¤èÒª¹Ô´: REG_DWORD
   °Ò¹: àÅ¢°Ò¹ÊÔº
   ¢éÍÁÙŤèÒ::ËÁÒÂàÅ¢¾ÍÃìµà¾×èÍ·Õè¶Ù¡¡Ó˹´ãËé ã¹ÃٻẺàÅ¢°Ò¹ÊÔº
4. ÍÍ¡¨Ò¡ "µÑÇá¡éä¢ÃÕ¨ÔÊ·ÃÕ"

To configure the RPC port for the Microsoft Exchange Information Store service, follow these steps:

1. àÃÔèÁâ»Ãá¡ÃÁ Registry Editor
2. Locate and then click to select the following subkey:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeIS\ParametersSystem
3. à¾ÔèÁ¤èÒÃÕ¨ÔÊ·ÃÕµèÍ仹Õé::
   ª×èͤèÒ: ¾ÍÃìµ TCP/IP
   ¤èÒª¹Ô´: REG_DWORD
   °Ò¹: àÅ¢°Ò¹ÊÔº
   ¢éÍÁÙŤèÒ::ËÁÒÂàÅ¢¾ÍÃìµà¾×èÍ·Õè¶Ù¡¡Ó˹´ãËé ã¹ÃٻẺàÅ¢°Ò¹ÊÔº
4. ÍÍ¡¨Ò¡ "µÑÇá¡éä¢ÃÕ¨ÔÊ·ÃÕ"

To configure the RPC port for the Microsoft Exchange System Attendant service, follow these steps:

1. àÃÔèÁâ»Ãá¡ÃÁ Registry Editor
2. Locate and then click to select the following subkey:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeSA\Parameters
3. à¾ÔèÁ¤èÒÃÕ¨ÔÊ·ÃÕµèÍ仹Õé::
   ª×èͤèÒ: ¾ÍÃìµ TCP/IP
   ¤èÒª¹Ô´: REG_DWORD
   °Ò¹: àÅ¢°Ò¹ÊÔº
   ¢éÍÁÙŤèÒ::ËÁÒÂàÅ¢¾ÍÃìµà¾×èÍ·Õè¶Ù¡¡Ó˹´ãËé ã¹ÃٻẺàÅ¢°Ò¹ÊÔº
4. ÍÍ¡¨Ò¡ "µÑÇá¡éä¢ÃÕ¨ÔÊ·ÃÕ"
5. àÃÔèÁµé¹Ãкº¤ÍÁ¾ÔÇàµÍÃìãËÁè

Limitations of Exchange Server static port mappings

The following list describes some of the limitations of Exchange Server static port mappings:

• Outlook client access issues
  
  If a process is already using the statically assigned port when the Exchange service starts, the Exchange service cannot use that port. However, the Microsoft Exchange Information Store service or the Microsoft Exchange Directory service, or both services, will still register all their other endpoints and start successfully.
  
  However, when users try to open Outlook and then connect to Exchange Server, they may receive the following error message:
  Unable to open your default e-mail folders. ¤Ø³äÁèÁÕÊÔ·¸Ôì㹡ÒÃà¢éÒÊÙèÃкº
  To resolve this issue, make sure that Exchange Server has initialized a port for the Microsoft Exchange Information Store service, the System Attendant service, and the NSPI service. You can verify this by running RPCDump on the server for the TCP/IP protocol.
  
  You can statically map the Exchange Server services that are listed in this article to any free TCP/IP port number in the full range (1 - 65535). If you run anetstat - ¡ÒäÓÊÑè§Ë¹éҨ;ÃéÍÁÃѺ¤ÓÊÑè§ ¤Ø³ä´éÃѺÃÒ¡Òâͧ¾ÍÃìµµèÒ§ æ ·Ñé§ËÁ´·ÕèÍÂÙèã¹¢³Ð¹Õéä´éŧ·ÐàºÕ¹äÇ麹à«ÔÃì¿àÇÍÃì ¤Ø³ÊÒÁÒöãªéÃÒ¡ÒùÕéà¾×èͪèÇÂ㹡ÒõÃǨÊͺãËÁè ¶Ù¡µéͧ (äÁèä´éãªé§Ò¹) ¾ÍÃìµ·Õè¤Ø³ÊÒÁÒöãªéà¾×èÍáÁ»ºÃÔ¡Òà Exchange statically
• »Ñ­ËÒà¡ÕèÂǡѺ¡ÒõԴµÒÁ¢éͤÇÒÁ
  
  àÁ×è͵éͧ¡ÒÃà»Ô´¡ÒÃãªé§Ò¹¢éͤÇÒÁ¡ÒõԴµÒÁ¿Ñ§¡ìªÑ¹º¹à«ÔÃì¿àÇÍÃì·Õè¡ÓÅѧàÃÕ¡ãªé Exchange 2000 Server Service Pack 2 (SP2) ËÃ×ÍÃØè¹·ÕèãËÁè¡ÇèÒ áÅзÕèÍÂÙè㹢ͺࢵ¢Í§à¤Ã×Í¢èÒ Windows ¨Ñ´¡Òà Instrumentation (WMI) µéͧä´éÃѺ͹حҵãËéàª×èÍÁµè͡Ѻà«ÔÃì¿àÇÍÃìà»éÒËÁÒÂ
  
  àÁ×è͵éͧ¡ÒÃÊÃéÒ§¡ÒÃàª×èÍÁµèÍ·Õè lowest ÁÕËÁÒÂàÅ¢¾ÍÃìµàÃÔèÁµé¹·Õè¾ÍÃìµ 1024 àÃÔèÁ¡ÒÃãËéºÃÔ¡Òà WMI ªèǧàÇÅÒ ËÁÒÂàÅ¢¾ÍÃìµ·Õè¶Ù¡ãªé â´Â WMI à¾ÔèÁµÒÁÅӴѺÊÓËÃѺ¢éÍÁÙÅà¾ÔèÁàµÔÁà¡ÕèÂǡѺÇÔ¸Õ¡ÒÃáÁ»¾ÍÃìµµèÒ§ æ ÊÓËÃѺ¡ÒÃãËéºÃÔ¡Òà WMI statically ¤ÅÔ¡ËÁÒÂàÅ¢º·¤ÇÒÁµèÍ仹Õéà¾×èÍ´Ùº·¤ÇÒÁã¹°Ò¹¤ÇÒÁÃÙé¢Í§ Microsoft:
  154596

  (http://support.microsoft.com/kb/154596/ )

  ÇÔ¸Õ¡ÒõÑ駤èҤ͹¿Ô¡¡ÒûѹÊèǹ䴹ÒÁÔ¡¾ÍÃìµ RPC ·Ó§Ò¹¡Ñºä¿ÃìÇÍÅÅì

Microsoft Exchange Server 2007

·Ó§Ò¹ã¹º·¤ÇÒÁ¹Õé ¡Ãкǹ¡ÒÃÊÓËÃѺ¡ÒÃáÁ»¾ÍÃìµáºº¤§·ÕèÊÓËÃѺ Exchange Server 2003 áÅÐ Exchange 2000 Server Âѧ¤§ä´éã¹ Exchange 2007 ÍÂèÒ§äáçµÒÁ µÔ´µÑ駢ͧà«ÔÃì¿àÇÍÃì·Õèãªé㹡ÒÃà¢éÒ¶Ö§ä¤Åà͹µìã¹à¤Ã×Í¢èÒÂ㹢ͺࢵäÁè¶Ù¡Ê¹ÑºÊ¹Ø¹ ¨ÐäÁèʹѺʹع¡Ò÷ÓãËéà«ÔÃì¿àÇÍÃì¡ÒÃà¢éÒ¶Ö§ä¤Åà͹µì ã¹à¤Ã×Í¢èÒÂ㹢ͺࢵ (àÃÕ¡ÍÕ¡ÍÂèÒ§ÇèÒ DMZ ⫹ demilitarized áÅÐà¤Ã×Í¢èÒÂÂèÍ screened), ËÃ×Í¡Ó˹´¤èÒã´ æ ·ÕèÁÕä¿ÃìÇÍÅÅìÃÐËÇèÒ§áÅеÑǤǺ¤ØÁ¡Åèͧ¨´ËÁÒÂËÃ×Íâ´àÁ¹ ä¿ÃìÇÍÅÅì¾ÍÃìµµèÒ§ æ ·Õèµéͧ¶Ù¡à»Ô´ÊÓËÃѺ Exchange 2007

The following topic provides information about ports, authentication, and encryption for all data paths that are used by Exchange 2007. The Notes sections following each table clarify or define non-standard authentication or encryption methods.
http://technet.microsoft.com/en-us/library/bb331973.aspx

For more information about how to fix the UDP port for Outlook 2003 and for Outlook 2007, click the following article number to view the article in the Microsoft Knowledge Base:
All servers except Edge servers should be deployed on the corporate network. Unlike earlier versions of Exchange, Microsoft does not support installing and deploying Exchange 2007 in a perimeter network. This information has been documented in the following Technet article:
ËÁÒÂà˵Ø:Installation of a Client Access server in a perimeter network is not supported. When no firewalls are between the Exchange 2007 servers, the Exchange 2007 servers should communicate freely with one another. The firewall should be between the production environment and the clients

For more information about how to configure static communication ports in Outlook 2003, click the following article number to view the article in the Microsoft Knowledge Base:For more information about how Outlook 2000 accesses the Active Directory directory service, click the following article number to view the article in the Microsoft Knowledge Base:For more information about the ports that Exchange 2000 Server uses, click the following article number to view the article in the Microsoft Knowledge Base:For more information about how MAPI clients access Active Directory, click the following article number to view the article in the Microsoft Knowledge Base:For more information about Outlook clients connect through a firewall or proxy server which is performing Network Address Translation (NAT) between public and private networks, click the following article number to view the article in the Microsoft Knowledge Base:For more information about how to configure ports for UDP new mail notification packets, click the following article number to view the article in the Microsoft Knowledge Base:For more information about port requirements for Windows Server systems, click the following article number to view the article in the Microsoft Knowledge Base: