California State University, Dominguez Hills
CSUDH Home Search Index
 IT-> Telecommunications-> Network Services
 Username  Password
Main Menu
· Home
· Downloads
· FAQ
· News
· Search
· Sections
· Topics

Security Focus
Vuln: MySQL MyISAM Table Privileges Secuity Bypass Vulnerability

Vuln: Oracle July 2008 Critical Patch Update Multiple Vulnerabilities

Vuln: Apache Tomcat Mod_JK.SO Arbitrary Code Execution Vulnerability

Vuln: Aprox CMS Engine 'index.php' SQL Injection Vulnerability

Bugtraq: Oracle Database Local Untrusted Library Path Vulnerability


Exchange User Migration

  1. Exchange 2003 Overview
    1. Client enhancements were one of the main product goals for Exchange 2003. Microsoft has done a lot of work to make OWA more like desktop Outlook than ever before.
    2. OWA 2003 includes a lot of small improvements, such as recalling the user's preferred size for item windows, the ability to mark a message in the Inbox as read or unread, a default signature, a command for adding a recipient to the user's Contacts folder, and a simple rules editor for creating server-based rules from existing messages. Keyboard shortcuts such as Ctrl+R for reply and Ctrl+Shift+F for forward help make OWA more like desktop Outlook.
    3. Spell check is another feature that OWA users have wanted for years. Up until now, it has been available only through third-party tools.
    4. Another long-desired feature is the ability to resolve names against the Global Address List (GAL). The LDAP lookups are very fast for users and groups.
    5. Security issues are important in Exchange 2003, and OWA has its share of improvements. OWA 2003 adds support for sending and receiving encrypted and digitally signed messages with Secure MIME (S/MIME). As in Outlook 11, the reading pane automatically blocks images, sounds, and other external content in email messages. This feature not only conserves bandwidth but also thwarts spammers who use so-called Web beacons—invisible images—to confirm valid email addresses. If the message contains a picture that you do need to see, you can click the "Click here to unblock content" link in the reading pane.

 

  1. Secure Web Access
    1. The new Web mail interface is only available through the SSL protocol (https). The server certificate requires 128-bit encryption. For some users, this will entail upgrading their version of Internet Explorer (go to Windows Update). Everything from username/password credentials to sending/receiving messages is encrypted.
    2. The new URL is http://email.csudh.edu. This URL will redirect you to the secure site.

 

  1. Access changes
    1. Due to the enhanced Web mail capabilities and security, MAPI, IMAP and HTTP will no longer be available for remote email access. RPC over HTTPS is being tested and will be deployed at a later date. Note: if you are a POP3 user, the Exchange 2003 server name changes to pop3.csudh.edu.

 

 

 

  1. The migration
    1. Your mailbox will be unavailable while the mailbox is being transitioned to the new server. The time varies based on the size of your mailbox and the number of items in your mailbox. Once the mailbox is homed in its new destination, it takes approximately 15-30 minutes (time varies depending on network traffic) to replicate through the directory.
    2. If you access your mailbox (MAPI) shortly after it’s been moved, you will most likely have to manually map its new location in Outlook. If you wait for full directory replication, it should be transparent when you next open Outlook. Follow the steps below to manually map its new location.

 

a.    Open Outlook properties by right clicking your Outlook icon on the desktop, then select Properties | E-mail Accounts

 

 


b.    Click Next and Change

 

 

c.     Type in the new server’s FQDN (call the Help Desk for server info.) and your account alias. Click “Check Name”, then Next>

 

 


d.    Click Finish, then open Outlook

 

 

  1. Outlook Web Access
    1. Open Internet Explorer and go to http://email.csudh.edu. In the dialog box you no longer have to use the domain\username format. Simply type your username and password.

 

 


    1. Here’s the new interface. Take note of the secure URL and lock.

 

 

    1. Click on “Options” to set up Out of Office assistant, Messaging Options, Reading pane, Spelling checking, Email security, Junk mail filters and miscellaneous format options.

 

 

 


    1. All messages are secure (click the lock to view certificate)

 

 

 


    1. Perform LDAP queries to resolve names from the GAL. You can type all or a portion of the name. Click the “To” button to add it to your email.

 

 

    1. Outlook functionality in the OWA client includes

a.    Right click

b.    Drag and Drop

c.     Folder view

d.    Advance options – see Options

e.    Secure Password change

 

 

 

Footerdot.gif
NSSRT :: Network Services Security Response Team   

     California State University, Dominguez Hills :: Information Technology Department
Telecommunications :: Network Services
1000 E. Victoria Street :: Carson, California 90747 :: (310) 243-3696