&RQWHQWV##
2YHUYLHZ#4#
,QWURGXFWLRQ#WR#2XWORRN#:HE#$FFHVV## 5#
2XWORRN#:HE#$FFHVV#$UFKLWHFWXUH#9#
2XWORRN#:HE#$FFHVV#'HSOR\PHQW# 4:#
([WHQGLQJ#2XWORRN#:HE#$FFHVV# 57#
/DE#$=#8VLQJ#([FKDQJH#5333##
2XWORRN#:HE#$FFHVV# 58#
/DE#%=#&UHDWLQJ#DQG#0DQDJLQJ##
)URQW0(QG#6HUYHUV# 69#
5HYLHZ# 75#
#
Module 12: Deploying
Exchange 2000 Outlook
Web Access Information in this document is subject to change without notice. The names of companies,
products, people, characters, and/or data mentioned herein are fictitious and are in no way intended
to represent any real individual, company, product, or event, unless otherwise noted. Complying
with all applicable copyright laws is the responsibility of the user. No part of this document may
be reproduced or transmitted in any form or by any means, electronic or mechanical, for any
purpose, without the express written permission of Microsoft Corporation. If, however, your only
means of access is electronic, permission to print one copy is hereby granted.

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual
property rights covering subject matter in this document. Except as expressly provided in any

Editing Manager:
Lynette Skinner
Editor:
Elizabeth Reese (Write Stuff)
Copy Editor:
Ed Casper (S&T Consulting), Carolyn Emory (S&T Consulting), Patricia Neff
(S&T Consulting), Noelle Robertson (S&T Consulting)
Online Program Manager:
Debbi Conger
Online Publications Manager:
Arlo Emerson (Aquent Partners)
Online Support:
Eric Brandt
Multimedia Developer
: Kelly Renner (Entex)
Compact Disc Testing:
Data Dimensions, Inc.
Production Support:
Ed Casper (S&T Consulting)
Manufacturing Manager:
Bo Galford
Manufacturing Support:
Rick Terek
Lead Product Manager, Development Services:

Lead Product Manager:
David Bramble
Group Product Manager:
Robert Stewart


„#
Read all the materials for this module.
„#
Complete the lab.

3UHVHQWDWLRQ=##
93#0LQXWHV#
#
/DE=#
63#0LQXWHV#
LY##0RGXOH#45=#'HSOR\LQJ#([FKDQJH#5333#2XWORRN#:HE#$FFHVV#0RGXOH#6WUDWHJ\#
Use the following strategy to present this module:
„#
Introduction to Microsoft Outlook Web Access
This section focuses on the primary features and limitations of Outlook Web
Access, and outlines the clients that Outlook Web Access supports.
„#
Outlook Web Access Architecture
Begin by introducing the Web-DAV technology and then explain how
Outlook Web Access uses HTTP and Web-DAV to communicate between
clients and the server. Next, use the graphic in the slide to describe the
Outlook Web Access Server components. Use the next slide to explain what
happens when a user logs on to their mailbox, and then explain how
Outlook Web Access opens and displays an e-mail message. Conclude this
section by discussing client authentication methods and front-end/back-end
server authentication methods.
„#

2EMHFWLYHV#
At the end of this module, you will be able to:
„#
Describe the features of Microsoft Outlook
®
Web Access that are new to
Microsoft Exchange 2000.
„#
List Outlook Web Access components and describe how they process client
requests.
„#
Plan an Outlook Web Access deployment.
„#
Extend Outlook Web Access in a custom Web application.

6OLGH#2EMHFWLYH#
7R#SURYLGH#DQ#RYHUYLHZ#RI#
WKH#PRGXOH#WRSLFV#DQG#
REMHFWLYHV1#
/HDG0LQ#
,Q#WKLV#PRGXOH/#\RX#ZLOO#OHDUQ#
DERXW#WKH#IHDWXUHV#DQG#
DUFKLWHFWXUDO#FRPSRQHQWV#RI#
2XWORRN#:HE#$FFHVV1#<RX#
ZLOO#DOVR#OHDUQ#KRZ#WR#SODQ#WR#
GHSOR\#2XWORRN#:HE#
$FFHVV/#FRQILJXUH#D#VHUYHU/#
DQG#H[WHQG#2XWORRN#:HE#
$FFHVV1#
5# # 0RGXOH#45=#'HSOR\LQJ#([FKDQJH#5333#2XWORRN#:HE#$FFHVV#

/HDG0LQ#
2XWORRN#:HE#$FFHVV#
SURYLGHV#D#VHFXUH#
HQYLURQPHQW#IRU#XVHUV#WR#
DFFHVV#D#FRPSXWHU#UXQQLQJ#
([FKDQJH#5333#E\#XVLQJ#DQ#
,QWHUQHW#EURZVHU/#VXFK#DV#
0LFURVRIW#,QWHUQHW#([SORUHU1#
1RWH#
# 0RGXOH#45=#'HSOR\LQJ#([FKDQJH#5333#2XWORRN#:HE#$FFHVV##6#2XWORRN#:HE#$FFHVV#)HDWXUHV#DQG#/LPLWDWLRQV#
„
6XSSRUWV#0HVVDJHV#7KDW#&RQWDLQ#(PEHGGHG#,WHPV#DQG#
0LFURVRIW##$FWLYH;#2EMHFWV
„
6XSSRUWV#3XEOLF#)ROGHUV#7KDW#&RQWDLQ#&RQWDFW#DQG#
&DOHQGDU#,WHPV
„
6XSSRUW#IRU#0XOWLPHGLD#0HVVDJHV
„
&DQ#8VH#1DPHG#85/V#WR#5HIHUHQFH#,WHPV
„
(QKDQFHG#,QWHUQHW#([SORUHU#8#6XSSRUW
„
/LPLWDWLRQVMicrosoft Exchange 2000 contains a new version of Outlook Web Access

([FKDQJH#53331#
/HDG0LQ#
7KH#([FKDQJH#5333#2XWORRN#
:HE#$FFHVV#FRPSRQHQW#
SURYLGHV#EHWWHU#SHUIRUPDQFH#
DQG#DGGLWLRQDO#IHDWXUHV1#
7# # 0RGXOH#45=#'HSOR\LQJ#([FKDQJH#5333#2XWORRN#:HE#$FFHVV#/LPLWDWLRQV#
Outlook Web Access is not designed to satisfy advanced e-mail and
collaboration requirements that the other products in the Outlook client family
addressed. Outlook Web Access is not intended to replace the full-featured
Outlook messaging client for the 16-bit Windows operating system or
Macintosh. Outlook Web Access does not include advanced features for:
„#
Offline use. Offline access is not supported. A user must connect to an
Exchange server to view information.
„#
E-mail. Outlook Web Access does not support Exchange Server digital
encryption, signature support, and S/MIME support. Outlook Web Access
also does not include replied and forwarded flags in list view, message flags
and inbox rules, three-pane view, search for messages, and WordMail and
Microsoft Office integration.
„#
Calendar and group scheduling. Outlook Web Access does not support
displays of discontinuous days side by side, appointment list views, view
details with free and busy, track acceptance of meeting attendees, all-day or
multiple-day events, task lists and task management, and export to devices
such as DataLink watches.

folders and use a folder tree to open and create new folders. When creating a
message, Internet Explorer 5 users can use rich-text editing features to add
formatting to the text.
2WKHU#%URZVHUV#
You can also use Outlook Web Access with browsers that minimally support
HTML 3.2 and European Computer Manufacturer Association (ECMA)
compliant JavaScript. Outlook Web Access functions by minimizing the client
side use of script with the objective of obtaining as broad a reach as possible
with maximum performance. The specific browsers that Outlook Web Access
supports include Internet Explorer 3.x and 4.x, and Netscape Navigator 3.x and
later running on operating systems such as Apple Macintosh, Microsoft
Windows 3.x, Microsoft Windows

95, Microsoft Windows 98, Microsoft
Windows NT
®
, and UNIX.
6OLGH#2EMHFWLYH#
7R#OLVW#WKH#FDWHJRULHV#RI#
2XWORRN#:HE#$FFHVV#FOLHQWV1#
/HDG0LQ#
2XWORRN#:HE#$FFHVV#LV#
RSWLPL]HG#IRU#,QWHUQHW#
([SORUHU#8/#EXW#DOVR#
VXSSRUWV#RWKHU#EURZVHUV#DQG#
HDUOLHU#YHUVLRQV#RI#,QWHUQHW#
([SORUHU1#
9# # 0RGXOH#45=#'HSOR\LQJ#([FKDQJH#5333#2XWORRN#:HE#$FFHVV#
# 0RGXOH#45=#'HSOR\LQJ#([FKDQJH#5333#2XWORRN#:HE#$FFHVV##:#:HE0'$9#
„
:HE0'$9#+5)&#584;,#,V#D#6HW#RI#+773#([WHQVLRQV#IRU#
$XWKRULQJ
„
3ULPDU\#)HDWXUHV#,QFOXGH#2YHUZULWH#3URWHFWLRQ/#
1DPHVSDFH#0DQDJHPHQW/#DQG#3URSHUW\#$FFHVV
„
:HE0'$9#6HUYHU#²,,6#813#DQG#([FKDQJH#5333
„
:HE0'$9#&OLHQWV#² ,QWHUQHW#([SORUHU#8/#2IILFH#5333/#:HE#
)ROGHUV#+%XLOW#LQ#WR#:LQGRZV#5333#RU#,QVWDOOHG#E\#
,QWHUQHW#([SORUHU#8,
„
,QWHUQHW#([SORUHU#8#XVHV#:HE0'$9#ZLWK#2XWORRN#:HE#
$FFHVVWeb-DAV is a set of extensions to Hypertext Transfer Protocol (HTTP), the
standard protocol that enables Web browsers to talk to Web servers. Web-DAV
can accommodate all types of content, which means users can use Web-DAV to
work collaboratively on a word processing document, a spreadsheet, or an
image file. Anything you can store in a file can potentially be authored using
Web-DAV.
Internet Explorer 5 clients use an extended version of HTTP known as
Web-DAV. Web-DAV makes the Web a collaborative, write-able medium.
Prior to Web-DAV, users mainly downloaded data to review on their local

,QWHUQHW#([SORUHU#8#FOLHQWV#
XVH#DQ#H[WHQGHG#YHUVLRQ#RI#
WKH#+773#SURWRFRO#NQRZQ#DV#
:HE0'$91#
;# # 0RGXOH#45=#'HSOR\LQJ#([FKDQJH#5333#2XWORRN#:HE#$FFHVV#:HE#)ROGHUV#
Web Folders provide another way to use Web-DAV to access data in Exchange.
Web Folders are designed to enable you to access a Web server in the same way
you access a file server, and Exchange 2000 also allows you to access
directories and items in the information store just like a file server. You can use
applications like Windows Explorer or Office 2000 to manage the data in the
Web Folder.
Web Folders are built into Windows 2000 and are added to Windows NT
version 4.0 and Windows 98 systems when a full installation of Internet
Explorer 5 is performed or Office 2000 is installed. You can configure a Web
Folder by adding a network place in My Network Places in Windows 2000 or
in the My Computer – Web Folders section on Windows NT 4.0 and
Windows 98.
Client requests to a Web Folder are handled in a similar manner as Web-DAV
requests from an Internet Explorer 5 client. The primary difference is that
Exchange 2000 returns Web pages to browser clients while other clients must
render the data returned from Web-DAV themselves.
# 0RGXOH#45=#'HSOR\LQJ#([FKDQJH#5333#2XWORRN#:HE#$FFHVV##<#2XWORRN#:HE#$FFHVV#$UFKLWHFWXUH#
Internet or
Intranet

Internet Services Application Programming Interface (ISAPI) application that
communicates with the Exchange Server information store. The information
store returns the requested data and the ISAPI application renders it into the
appropriate HTML for the client’s browser.
In addition to HTML, Outlook Web Access sends additional data to Internet
Explorer 5 clients by using XML. Using XML enables the client to increase
processing performance while sending fewer requests to the server.
In a scaled or distributed environment, one or more front-end servers process a
client’s requests and route them to the back-end server that contains the client
user’s mailbox.
6OLGH#2EMHFWLYH#
7R#LQWURGXFH#WKH#
DUFKLWHFWXUH#RI#2XWORRN#:HE#
$FFHVV1#
/HDG0LQ#
7KH#2XWORRN#:HE#$FFHVV#
VHUYHU#SHUIRUPV#IXQFWLRQV#
LGHQWLFDO#WR#WKRVH#RI#D#0$3,#
FOLHQW1#
43# # 0RGXOH#45=#'HSOR\LQJ#([FKDQJH#5333#2XWORRN#:HE#$FFHVV#6HUYHU#&RPSRQHQWV#
Windows 2000 Network
Windows 2000 Network
Windows 2000 Network
IIS
NTFS
NTFS
HTTP Request

Exchange 2000.

If the client is using Internet Explorer 5, Outlook Web Access uses the DHTML
feature of Internet Explorer to perform more of the rendering on the client,
which improves server performance. By using DHTML behaviors, Outlook
Web Access can encapsulate commonly used HTML and script and download it
only once to the client. For all other clients, such as Internet Explorer 4.x and
Netscape Navigator, most of the rendering is performed on the server with a
small amount of JavaScript being sent to the client.
6OLGH#2EMHFWLYH#
7R#H[SODLQ#WKH#2XWORRN#:HE#
$FFHVV#VHUYHU#FRPSRQHQWV1#
/HDG0LQ#
6HYHUDO#VRIWZDUH#
FRPSRQHQWV#ZRUN#WRJHWKHU#
WR#SURYLGH#2XWORRN#:HE#
$FFHVV#IXQFWLRQDOLW\1#
1RWH#
# 0RGXOH#45=#'HSOR\LQJ#([FKDQJH#5333#2XWORRN#:HE#$FFHVV# # 44#/RJRQ#DQG#0DLOER[#'LVSOD\#
Active Directory-based
Domain Controller
Active Directory-based
Domain Controller
Outlook Web
Access Server
Outlook Web
Access Server

exchange/mailbox name).
The following steps describe the flow of information when a user logs on to
their mailbox and views the Inbox:
1. The user requests the Exchange 2000 mailbox by specifying the following
URL in their browser:
http://Outlook Web Access Servername/exchange/mailbox
2. The user is authenticated by the IIS Web server, which determines a user’s
Windows 2000 account.
3. The mailbox location for the user is queried from Active Directory
™

directory service.
If the mailbox is on another server, the browser is redirected to that server
and user authentication occurs again.
4. Outlook Web Access returns a default page for the mailbox that contains a
navigation bar in the left-hand frame and a view of the mailbox contents
(\exchange\mailbox name) in the right-hand frame. In Exchange Server 5.5, Outlook Web Access used a separate logon page
for users, which asked the user for the name of the mailbox to which they
wanted to connect.

6OLGH#2EMHFWLYH#
7R#VKRZ#WKH#IORZ#RI#
LQIRUPDWLRQ#ZKHQ#D#XVHU#
ORJV#RQ#WR#WKHLU#PDLOER[1#
/HDG0LQ#
([FKDQJH#5333#XVHV#ORJRQ#
FUHGHQWLDOV#WR#DXWRPDWLFDOO\#

Outlook Web
Access
Server-Side
Component
Active
Directory
Active
Directory
Store
Store
DSACCES
DSACCES
Request
RendererThe following process describes how Outlook Web Access opens and displays
an e-mail message. This process also applies to other Outlook Web Access
operations, such as opening and displaying a folder.
41#%URZVHU=#5HTXHVW#)RU#(0PDLO#0HVVDJH#6HQW#
You can access a message from the browser by:
„#
Clicking on the message in a folder contents view.
„#
Typing the URL to the message into the Address field of the browser and
pressing ENTER.
„#
Choosing a browser favorite item that points to a message.

For all of these methods, the browser issues a GET request for a URL that looks

rendered for a browser or returned without
rendering to a Web-DAV application such
as Word 2000.
Query String Determine a specific action to perform.

61#,QIRUPDWLRQ#6WRUH=#,WHP#7\SH#'HWHUPLQHG#
The server verifies that the user has access to the item in the information store,
determines the type of object, and returns the type of item and its state (read,
unread, and so on) to the Exchange ISAPI application.
71#,,6#:HE#6HUYHU=#([FKDQJH#,6$3,#6HOHFWV#WKH#)RUP#
The Exchange ISAPI application takes these object attributes and looks for a
form definition in the Forms Registry that matches the object’s type. If the
Exchange ISAPI application cannot find a matching form definition, it uses a
default form stored in Wmtemplates.dll. If the browser language is not English,
language specific strings are loaded from other template libraries in the
\Exchsrvr\Res\ directory.
81#,QIRUPDWLRQ#6WRUH=#,QIRUPDWLRQ#6WRUH#5HWULHYHV#'DWD#IRU#7KH#)RUP#
After a form definition is found, the Exchange ISAPI application parses the
form, and notifies the information store to retrieve the data it references.
91#,,6#:HE#6HUYHU=#([FKDQJH#,6$3,#5HQGHUV#WKH#)RUP#
When the data is returned from the information store, the Exchange ISAPI
application renders the form into the appropriate HTML and XML and sends it
to the client.
The HTML information is not browser or platform dependent. Outlook Web
Access renders the HTML based on a variety of factors, including the browser
version. Non-Internet Explorer browsers will receive HTML code that
conforms to the HTML 3.2 standard. Internet Explorer 5 and later browsers will
receive dynamic HTML, which means different elements will respond to user
clicks and not require communication with the server.
Outlook Web Access uses a frameset consisting of two frames, the navigation

Does not provide security on an individual basis.
All anonymous authenticated users can access
any content the Anonymous user account
(IUSER_Computername) has access to.
Basic Supported by most clients, this method
works through proxies and firewalls.
Password is sent as clear text, unless the Secure
Sockets Layer (SSL) protocol is used to encrypt.
Digest The password is sent as a hashed value,
which works through proxies and
firewalls. This method works with all
HTTP 1.1 compliant browsers.
Password is unencrypted in the Windows 2000
domain controller (must protect the server
carefully).
Does not work through front-end server.
Certificate Very secure and supported by a broad
range of clients.
Requires creating, obtaining, and managing
certificates, and then deploying them to the
clients.
Integrated Windows The password is sent as an encrypted
value for highest security.
Only supported by Internet Explorer 2.0 and
greater clients.
Does not work through HTTP proxies.
Only works through a front-end server when
using Internet Explorer 5 on Windows 2000.