{"id":17,"date":"2010-12-22T13:46:05","date_gmt":"2010-12-22T13:46:05","guid":{"rendered":"http:\/\/test2.djblond.cz\/index.php\/2010\/12\/22\/clanek-konfigurace-owa\/"},"modified":"2010-12-22T13:46:05","modified_gmt":"2010-12-22T13:46:05","slug":"clanek-konfigurace-owa","status":"publish","type":"post","link":"https:\/\/www.djblond.cz\/index.php\/2010\/12\/22\/clanek-konfigurace-owa\/","title":{"rendered":"Konfigurace OWA"},"content":{"rendered":"<h3 id=\"potrebujeme\">Co pot\u0159ebujeme<\/h3>\n<ol>\n<li><strong>Exchange Server 2003 SP2<\/strong> (service pack nen\u00ed d\u016fle\u017eit\u00fd, ale budu popisovat tuto verzi)<\/li>\n<li><strong>Internet Explorer 6<\/strong> (p\u0159\u00edpadn\u011b Firefox \u010di jin\u00fd alternativn\u00ed prohl\u00ed\u017ee\u010d)<\/li>\n<\/ol>\n<p><strong><em>Pozn.:<\/em><\/strong> V\u011bt\u0161inu softwaru pou\u017e\u00edv\u00e1m v&nbsp;anglick\u00e9  verzi (v\u010detn\u011b Windows&nbsp;2003 serveru a Exchange serveru), proto budu  popisovat nastaven\u00ed anglick\u00e9, mysl\u00edm v\u0161ak, \u017ee nen\u00ed probl\u00e9m aplikovat  stejn\u00fd postup na \u010deskou verzi.<\/p>\n<h3 id=\"dosahneme\">\u010ceho dos\u00e1hneme<\/h3>\n<p>Ve verzi Exchange Server 2003 je <strong><abbr title=\"Outlook Web Access\">OWA<\/abbr><\/strong> velice vylep\u0161ena a pokud pou\u017eijeme <strong><em>Premium klienta<\/em><\/strong>, kter\u00fd vy\u017eaduje jako prohl\u00ed\u017ee\u010d minim\u00e1ln\u011b <em>Internet Explorer 5.01<\/em>, dos\u00e1hneme komfortn\u00edho rozhran\u00ed, kter\u00e9 se p\u0159\u00edli\u0161 neli\u0161\u00ed od aplikace <em>Outlook 2003<\/em>. Jsou zde podporov\u00e1na kontextov\u00e1 menu na prav\u00e9 tla\u010d\u00edtko my\u0161i, technologie drag&amp;drop, kontrola pravopisu, pr\u00e1ce s&nbsp;<abbr title=\"Global Address List\">GALem<\/abbr> atd.<\/p>\n<div class=\"center\"><img loading=\"lazy\" src=\"http:\/\/www.samuraj-cz.com\/gallery\/000205.jpg\" alt=\"OWA v prohl\u00ed\u017ee\u010di\" title=\"OWA v prohl\u00ed\u017ee\u010di\" class=\"img \" width=\"560\" height=\"658\" \/><\/div>\n<h3 id=\"jazyky\">Jak je to s&nbsp;jazyky<\/h3>\n<p>Nejprve z\u00e1le\u017e\u00ed na tom, jak\u00e9 jazyky m\u00e1me nastaven\u00e9 na Exchange serveru. To m\u016f\u017eete m\u011bnit n\u00e1sledn\u011b:<\/p>\n<ul>\n<li>otev\u0159eme <strong>System Manager<\/strong><\/li>\n<li>otev\u0159eme polo\u017eku <strong>Servers<\/strong> a klikneme prav\u00fdm tla\u010d\u00edtkem na  <strong>jm\u00e9no_serveru<\/strong><\/li>\n<li>p\u0159epneme se na z\u00e1lo\u017eku <strong>Locales<\/strong><\/li>\n<\/ul>\n<p><strong><em>Pozn.:<\/em><\/strong> Tak alespo\u0148 hovo\u0159\u00ed dokumentace,  ov\u0161em z&nbsp;vlastn\u00ed zku\u0161enosti mohu \u0159\u00edct, \u017ee nap\u0159\u00edklad v&nbsp;Chile jsem m\u011bl  rozhrann\u00ed ve \u0160pan\u011bl\u0161tin\u011b a v&nbsp;Braz\u00edlii v&nbsp;Portugal\u0161tin\u011b, p\u0159esto\u017ee tyto  jazyky nem\u00e1m na serveru nastaveny.<\/p>\n<div class=\"center\"><img loading=\"lazy\" src=\"http:\/\/www.samuraj-cz.com\/gallery\/000206.jpg\" alt=\"Jazyky na Exchange serveru\" title=\"Jazyky na Exchange serveru\" class=\"img \" width=\"404\" height=\"484\" \/><\/div>\n<p>D\u00e1le z\u00e1le\u017e\u00ed na tom, jak\u00fd <strong><em>jazyk<\/em><\/strong> m\u00e1 klient nastaven\u00fd v&nbsp;<em>prohl\u00ed\u017ee\u010di.<\/em> U <em>Internet Exploreru 6<\/em> je to v&nbsp;menu&nbsp;<strong><em>Tools -&gt; Internet Options -&gt; z\u00e1lo\u017eka General -&gt; Languages<\/em><\/strong>. Pou\u017eije se jazyk, kter\u00fd je nejv\u00edce naho\u0159e.<\/p>\n<p><strong>Jedin\u00e1 mo\u017enost jak zm\u011bnit jazyk v&nbsp;<abbr title=\"Outlook Web Access\">OWA<\/abbr>, je zm\u011bnit tento jazyk v&nbsp;prohl\u00ed\u017ee\u010di.<\/strong><\/p>\n<div class=\"center\"><img loading=\"lazy\" src=\"http:\/\/www.samuraj-cz.com\/gallery\/000207.jpg\" alt=\"Jazyky v IE\" title=\"Jazyky v IE\" class=\"img \" width=\"344\" height=\"308\" \/><\/div>\n<h4 id=\"jmena_slozek\">Probl\u00e9m s&nbsp;jazykem ve jm\u00e9nech slo\u017eek<\/h4>\n<p><strong>Emailov\u00e1 schr\u00e1nka<\/strong> se fyzicky vytv\u00e1\u0159\u00ed na Exchange serveru a\u017e p\u0159i <strong><em>prvn\u00edm p\u0159ipojen\u00ed<\/em><\/strong>. V&nbsp;t\u00e9to chv\u00edli se vytv\u00e1\u0159\u00ed struktura slo\u017eek. N\u00e1zvy t\u011bchto slo\u017eek se vytvo\u0159\u00ed v&nbsp;jazyce va\u0161eho prost\u0159ed\u00ed. <strong><em>P\u0159.:<\/em><\/strong> opera\u010dn\u00ed syst\u00e9m Windows XP je v&nbsp;anglick\u00e9 verzi a v&nbsp;region\u00e1ln\u00edm  nastaven\u00ed je zvolena \u010de\u0161tina, p\u0159i prvn\u00edm p\u0159ipojen\u00ed z&nbsp;MS Outlook 2003 se  slo\u017eky vytvo\u0159\u00ed anglicky. Probl\u00e9m m\u016f\u017ee nastat, kdy\u017e prvn\u00ed p\u0159ipojen\u00ed ke  schr\u00e1nce provedete p\u0159es <abbr title=\"Outlook Web Access\">OWA<\/abbr> a v&nbsp;prohl\u00ed\u017ee\u010di m\u00e1te nastaven jin\u00fd jazyk, nap\u0159. \u010de\u0161tinu, potom se slo\u017eky vytvo\u0159\u00ed v&nbsp;tomto jazyce.<\/p>\n<p>\u0158e\u0161en\u00ed je jednoduch\u00e9, na klientovi (mus\u00ed b\u00fdt vypnut\u00fd Outlook) zadejte <code>Outlook.exe \/resetfoldernames<\/code> a jm\u00e9na adres\u00e1\u0159\u016f se nastav\u00ed podle klienta.<\/p>\n<h3 id=\"zprovozneni\">Zprovozn\u011bn\u00ed OWA<\/h3>\n<p>Se zprovozn\u011bn\u00edm nen\u00ed \u017e\u00e1dn\u00fd probl\u00e9m, proto\u017ee ji\u017e ve standardn\u00edm  (v\u00fdchoz\u00edm) nastaven\u00ed je v\u0161e zapnuto, ale je t\u0159eba zv\u00fd\u0161it bezpe\u010dnost.<\/p>\n<h3 id=\"vypnuti_server\">Vypnut\u00ed OWA pro server<\/h3>\n<p>Pokud bychom cht\u011bli vypnout <abbr title=\"Outlook Web Access\">OWA<\/abbr> pro cel\u00fd server, tak jedin\u00e1 mo\u017enost je vypnout cel\u00fd <strong><em>Web Site<\/em><\/strong>, v&nbsp;kter\u00e9m <abbr title=\"Outlook Web Access\">OWA<\/abbr> b\u011b\u017e\u00ed, tj. <strong>Exchange Virtual Server<\/strong>. To provedeme n\u00e1sledn\u011b:<\/p>\n<ul>\n<li>otev\u0159eme <strong>System Manager<\/strong><\/li>\n<li>otev\u0159eme polo\u017eku <strong>Servers -&gt; jm\u00e9no_serveru -&gt; Protocols -&gt; HTTP<\/strong><\/li>\n<li>klikneme prav\u00fdm tla\u010d\u00edtkem na <strong>Exchange Virtual Server<\/strong><\/li>\n<li>zvol\u00edme <strong>Stop<\/strong><\/li>\n<\/ul>\n<div class=\"center\"><img loading=\"lazy\" src=\"http:\/\/www.samuraj-cz.com\/gallery\/000208.jpg\" alt=\"System Manager - virtu\u00e1ln\u00ed server\" title=\"System Manager - virtu\u00e1ln\u00ed server\" class=\"img \" width=\"537\" height=\"473\" \/><\/div>\n<h3 id=\"vypnuti_klient\">Vypnut\u00ed OWA pro u\u017eivatele<\/h3>\n<p>P\u0159\u00edstup k&nbsp;<abbr title=\"Outlook Web Access\">OWA<\/abbr> m\u016f\u017eeme \u0159\u00eddit pro ka\u017ed\u00e9ho u\u017eivatele. Pokud bychom cht\u011bli povolit p\u0159\u00edstup k&nbsp;<abbr title=\"Outlook Web Access\">OWA<\/abbr> pouze n\u011bkter\u00fdm u\u017eivatel\u016fm (defaultn\u011b maj\u00ed v\u0161ichni povoleno), tak postupujeme n\u00e1sledn\u011b:<\/p>\n<ul>\n<li>otev\u0159eme <strong>Active Directory Users And Computers<\/strong> (pot\u0159ebujeme roz\u0161\u00ed\u0159en\u00ed pro Exchange) <\/li>\n<li>najdeme u\u017eivatele, kter\u00e9mu chceme zm\u011bnit nastaven\u00ed <\/li>\n<li>otev\u0159eme jeho <strong>Properties<\/strong> <\/li>\n<li>klikneme na z\u00e1lo\u017eku <strong>Exchange Features<\/strong> <\/li>\n<li>ve skupin\u011b <strong>Protocols<\/strong> m\u016f\u017eeme vypnout nebo zapnout <strong>Outlook Web Access<\/strong> <\/li>\n<\/ul>\n<div class=\"center\"><img loading=\"lazy\" src=\"http:\/\/www.samuraj-cz.com\/gallery\/000209.jpg\" alt=\"Nastaven\u00ed OWA pro u\u017eivatele\" title=\"Nastaven\u00ed OWA pro u\u017eivatele\" class=\"img \" width=\"404\" height=\"520\" \/><\/div>\n<h3 id=\"pristup\">Nastaven\u00ed p\u0159\u00edstupu<\/h3>\n<p><strong><abbr title=\"Outlook Web Access\">OWA<\/abbr><\/strong> je, ve sv\u00e9 podstat\u011b, webov\u00e1 aplikace, tak\u017ee nastaven\u00ed bezpe\u010dnosti se t\u00fdk\u00e1 n\u011bkolika <strong><em>virtu\u00e1ln\u00edch adres\u00e1\u0159\u016f<\/em><\/strong> pod webov\u00fdm serverem (b\u011b\u017en\u011b Default Web Site). Autentizace u\u017eivatele se  prov\u00e1d\u00ed klasicky oproti dom\u00e9nov\u00e9mu \u0159adi\u010di (pou\u017eije se Active  Directory), my m\u016f\u017eeme ur\u010dovat jak\u00fdm zp\u016fsobem a jak\u00e1 autentiza\u010dn\u00ed data se  pou\u017eij\u00ed.<\/p>\n<h4 id=\"virtualni_adresare\">Virtu\u00e1ln\u00ed adres\u00e1\u0159e pro OWA<\/h4>\n<dl>\n<dt>\/Exchange<\/dt>\n<dd>hlavn\u00ed adres\u00e1\u0159 pro p\u0159\u00edstup k&nbsp;u\u017eivatelsk\u00fdm schr\u00e1nk\u00e1m (\\\\.\\BackOfficeStorage\\domain\\MBX)<\/dd>\n<dt>\/Public<\/dt>\n<dd>p\u0159\u00edstup k&nbsp;ve\u0159ejn\u00fdm slo\u017ek\u00e1m (\\\\.\\BackOfficeStorage\\domain\\Public Folders)<\/dd>\n<dt>\/ExchWeb<\/dt>\n<dd>obsahuje grafiku a dal\u0161\u00ed pot\u0159ebn\u00e9 v\u011bci pro <abbr title=\"Outlook Web Access\">OWA<\/abbr> (k&nbsp;tomuto adres\u00e1\u0159i se nep\u0159istupuje p\u0159\u00edmo) (C:\\Program Files\\Exchsrvr\\ExchWeb)<\/dd>\n<\/dl>\n<p>K&nbsp;t\u011bmto virtu\u00e1ln\u00edm adres\u00e1\u0159\u016fm m\u016f\u017eeme p\u0159istupovat p\u0159es <strong>System Manager<\/strong>, nach\u00e1z\u00ed se v&nbsp;<strong><em>Servers -&gt; jm\u00e9no_serveru -&gt; Protocols -&gt; HTTP -&gt; Exchange Virtual Server<\/em><\/strong>. Nebo p\u0159es <strong>Internet Information Services (IIS) Manager<\/strong>, pod <strong><em>jm\u00e9no_serveru -&gt; Web Sites -&gt; Default Web Site<\/em><\/strong>. Nastaven\u00ed na t\u011bchto m\u00edstech v\u0161ak nejsou \u00fapln\u011b toto\u017en\u00e1. <strong>Hodnoty, kter\u00e9 je mo\u017eno nastavit v&nbsp;System Manageru, je t\u0159eba nastavovat zde<\/strong>. <em>Exchange server<\/em> toti\u017e ka\u017ed\u00fdch 15 minut a p\u0159i restartu spou\u0161t\u00ed proces <abbr title=\"Directory Service\/Metabase Synchronization\">DS2MB<\/abbr>, kter\u00fd p\u0159episuje tyto hodnoty do IIS.<\/p>\n<p><strong><em>Pozn.:<\/em><\/strong> adres\u00e1\u0159 <strong>ExchWeb<\/strong> je p\u0159\u00edstupn\u00fd pouze p\u0159es <strong>IIS<\/strong>.<\/p>\n<div class=\"center\"><img loading=\"lazy\" src=\"http:\/\/www.samuraj-cz.com\/gallery\/000210.jpg\" alt=\"IIS virtu\u00e1ln\u00ed adres\u00e1\u0159e\" title=\"IIS virtu\u00e1ln\u00ed adres\u00e1\u0159e\" class=\"img \" width=\"400\" height=\"367\" \/><\/div>\n<h4 id=\"prava\">Nastaven\u00ed p\u0159\u00edstupov\u00fdch pr\u00e1v<\/h4>\n<p><strong>P\u0159\u00edstupov\u00e1 pr\u00e1va<\/strong> k&nbsp;virtu\u00e1ln\u00edmu adres\u00e1\u0159i pro <strong>Exchange<\/strong> a <strong>Public<\/strong> nastavujeme v&nbsp;<strong><em>System Manageru<\/em><\/strong> (prav\u00fdm tla\u010d\u00edtkem na dan\u00fd virtu\u00e1ln\u00ed adres\u00e1\u0159, Properties, z\u00e1lo\u017eka Access). Ve v\u00fdchoz\u00edm nastaven\u00ed je povoleno v\u0161e pod <strong><em>Access Control<\/em><\/strong> a <strong><em>Execute Permissions<\/em><\/strong> je nastaveno na <strong><em>None<\/em><\/strong>. Aby fungovaly spr\u00e1vn\u011b v\u0161echny funkce <abbr title=\"Outlook Web Access\">OWA<\/abbr>, je t\u0159eba toto nastaven\u00ed zachovat. Pr\u00e1va pro <strong>ExchWeb<\/strong> se nastavuj\u00ed v&nbsp;<strong><em>IIS<\/em><\/strong> (prav\u00fdm tla\u010d\u00edtkem na dan\u00fd virtu\u00e1ln\u00ed adres\u00e1\u0159, Properties, z\u00e1lo\u017eka Virtual Directory) a je povoleno pouze \u010dten\u00ed.<\/p>\n<div class=\"center\"><img loading=\"lazy\" src=\"http:\/\/www.samuraj-cz.com\/gallery\/000211.jpg\" alt=\"System Manager - p\u0159\u00edstupov\u00e1 pr\u00e1va na adres\u00e1\u0159\" title=\"System Manager - p\u0159\u00edstupov\u00e1 pr\u00e1va na adres\u00e1\u0159\" class=\"img \" width=\"404\" height=\"448\" \/><\/div>\n<h4 id=\"autentizace\">Nastaven\u00ed autentiza\u010dn\u00edch metod<\/h4>\n<p>Pou\u017e\u00edvan\u00e9 zp\u016fsoby autentizace jsou:<\/p>\n<dl>\n<dt>Basic authentication<\/dt>\n<dd>co\u017e je z\u00e1kladn\u00ed a nejv\u00edce podporovan\u00e1 mo\u017enost, ale informace jsou pos\u00edl\u00e1ny ne\u0161ifrov\u00e1ny, proto je pou\u017eiteln\u00e1 pouze dohromady se <abbr title=\"Secure Sockets Layer\">SSL<\/abbr><\/dd>\n<dt>Integrated Windows Authentication<\/dt>\n<dd>p\u0159i t\u00e9to metod\u011b server &#8222;vyjedn\u00e1v\u00e1&#8220; s&nbsp;opera\u010dn\u00edm syst\u00e9mem klienta  (min Windows&nbsp;2000) a nen\u00ed t\u0159eba zad\u00e1vat p\u0159ihla\u0161ovac\u00ed \u00fadaje (vyu\u017e\u00edv\u00e1 se  aktu\u00e1ln\u00ed p\u0159ihl\u00e1\u0161en\u00ed)<\/dd>\n<dt>Anonymus access<\/dt>\n<dd>anonymn\u00ed p\u0159\u00edstup, Windows vytvo\u0159\u00ed speci\u00e1ln\u00ed lok\u00e1ln\u00ed \u00fa\u010det IUSR_jmeno_serveru pro tento p\u0159\u00edstup, ale heslo nen\u00ed ov\u011b\u0159ov\u00e1no<\/dd>\n<\/dl>\n<p>Adres\u00e1\u0159e <strong>Exchange<\/strong> a <strong>Public<\/strong> nastavujeme v&nbsp;<strong><em>System Manageru<\/em><\/strong> (prav\u00fdm tla\u010d\u00edtkem na dan\u00fd virtu\u00e1ln\u00ed adres\u00e1\u0159, Properties, z\u00e1lo\u017eka  Access, tla\u010d\u00edtko Authentication). Ve v\u00fdchoz\u00edm nastaven\u00ed je povoleno <strong>Basic authentication <\/strong>a <strong>Integrated Windows Authentication <\/strong>(prov\u00e1d\u00ed se vyjedn\u00e1v\u00e1n\u00ed, kdy se nejprve sna\u017e\u00ed pou\u017e\u00edt bezpe\u010dn\u011bj\u0161\u00ed metodu a pokud ji klient nepodporuje, zkou\u0161\u00ed se dal\u0161\u00ed)<\/p>\n<div class=\"center\"><img loading=\"lazy\" src=\"http:\/\/www.samuraj-cz.com\/gallery\/000212.jpg\" alt=\"System Manager - nastaven\u00ed autentizace\" title=\"System Manager - nastaven\u00ed autentizace\" class=\"img \" width=\"384\" height=\"404\" \/><\/div>\n<p>Pro adres\u00e1\u0159 <strong>ExchWeb<\/strong> se nastavuje v&nbsp;<strong>IIS<\/strong> (prav\u00fdm tla\u010d\u00edtkem na dan\u00fd virtu\u00e1ln\u00ed adres\u00e1\u0159 a Properties, z\u00e1lo\u017eka  Directory Security, v&nbsp;Authentication and access control tla\u010d\u00edtko Edit) a  defaultn\u011b je povolen <strong>anonymn\u00ed p\u0159\u00edstup<\/strong> k&nbsp;tomuto adres\u00e1\u0159i. Ale podadres\u00e1\u0159 <strong>BIN<\/strong>, kter\u00fd obsahuje \u0159\u00edzen\u00ed, m\u00e1 ji\u017e nastavenu <strong>Integrated Windows Authentication<\/strong> a <strong>Basic authentication<\/strong>.<\/p>\n<div class=\"center\"><img loading=\"lazy\" src=\"http:\/\/www.samuraj-cz.com\/gallery\/000213.jpg\" alt=\"IIS - nastaven\u00ed autentizace\" title=\"IIS - nastaven\u00ed autentizace\" class=\"img \" width=\"371\" height=\"444\" \/><\/div>\n<p><strong>Stejn\u011b jako u p\u0159\u00edstupov\u00fdch pr\u00e1v nen\u00ed d\u016fvod k&nbsp;\u017e\u00e1dn\u00fdm zm\u011bn\u00e1m v\u00fdchoz\u00edho nastaven\u00ed.<\/strong><\/p>\n<h3 id=\"SSL\">OWA p\u0159es SSL<\/h3>\n<p>A\u0165 ji\u017e kv\u016fli <strong>Basic authentication<\/strong> nebo proto, \u017ee  v&nbsp;po\u0161t\u011b se p\u0159en\u00e1\u0161ej\u00ed citliv\u00e1 data (ponechme stranou fakt jak\u00fdm zp\u016fsobem  doraz\u00ed zpr\u00e1va na server), bych jednozna\u010dn\u011b doporu\u010dil pou\u017e\u00edvat pro  spojen\u00ed <strong>\u0161ifrov\u00e1n\u00ed<\/strong> pomoc\u00ed <strong><abbr title=\"Secure Sockets Layer\">SSL<\/abbr><\/strong> a na str\u00e1nky tedy p\u0159istupovat p\u0159es protokol <strong><abbr title=\"Hypertext Transfer Protocol over Secure Socket Layer\">HTTPS<\/abbr><\/strong> (standardn\u011b port 443).<\/p>\n<p>Nejprve je t\u0159eba m\u00edt na severu nainstalov\u00e1n <strong><em>serverov\u00fd certifik\u00e1t<\/em><\/strong>. Pokud jej nem\u00e1me, tak si o n\u011bj za\u017e\u00e1d\u00e1me u na\u0161\u00ed <strong><em>certifika\u010dn\u00ed autority<\/em><\/strong>, p\u0159\u00edpadn\u011b spr\u00e1vce certifik\u00e1t\u016f. Pokud zat\u00edm nepou\u017e\u00edv\u00e1me certifik\u00e1ty, tak si v&nbsp;men\u0161\u00ed firm\u011b m\u016f\u017eeme nainstalovat <em>certifika\u010dn\u00ed autoritu<\/em> od <em>Microsoftu<\/em> na <em>Windows Server<\/em>. A n\u00e1sledn\u011b vydat certifik\u00e1t, v&nbsp;tomto p\u0159\u00edpad\u011b nebude p\u0159i p\u0159ipojen\u00ed p\u0159es <abbr title=\"Outlook Web Access\">OWA<\/abbr> certifik\u00e1t d\u016fv\u011bryhodn\u00fd, dokud na\u0161i autoritu nep\u0159id\u00e1me mezi d\u016fv\u011bryhodn\u00e9 na klientovi. Vyd\u00e1n\u00ed certifik\u00e1tu provedeme v&nbsp;&nbsp;<strong>mmc konzoli<\/strong>, <strong><em>Snap-in Certificates<\/em><\/strong> pro <strong><em>Computer account<\/em><\/strong>, pod <strong><em>Personal<\/em><\/strong> &#8211; prav\u00fdm tla\u010d\u00edtkem na  <strong><em>Certificates<\/em><\/strong> a <strong><em>All Tasks \u2013 Request New Certificate<\/em><\/strong>.<\/p>\n<h4 id=\"HTTPS\">Vynucen\u00ed pou\u017eit\u00ed HTTPS<\/h4>\n<ul>\n<li>otev\u0159eme <strong>Internet Information Services (IIS) Manager<\/strong><\/li>\n<li>rozbal\u00edme <strong>jm\u00e9no_serveru -&gt; Web Sites -&gt; Default Web Site<\/strong><\/li>\n<li>klikneme prav\u00fdm tla\u010d\u00edtkem na adres\u00e1\u0159 <strong>Exchange<\/strong> (a postupn\u011b zopakujeme pro ExchWeb i Public) <\/li>\n<li>zvol\u00edme <strong>Properties<\/strong><\/li>\n<li>p\u0159epneme se na z\u00e1lo\u017eku <strong>Directory Security<\/strong><\/li>\n<li>ve skupin\u011b <strong>Secure communications<\/strong> klikneme na <strong>Edit<\/strong><\/li>\n<li>zde zvol\u00edme <strong>Require secure channel (SSL)<\/strong> a nav\u00edc m\u016f\u017eeme vy\u017eadovat 128bitov\u00e9 \u0161ifrov\u00e1n\u00ed<\/li>\n<\/ul>\n<div class=\"center\"><img loading=\"lazy\" src=\"http:\/\/www.samuraj-cz.com\/gallery\/000219.jpg\" alt=\"IIS - nastaven\u00ed zabezpe\u010den\u00ed\" title=\"IIS - nastaven\u00ed zabezpe\u010den\u00ed\" class=\"img \" width=\"472\" height=\"458\" \/><\/div>\n<div class=\"center\"><img loading=\"lazy\" src=\"http:\/\/www.samuraj-cz.com\/gallery\/000214.jpg\" alt=\"IIS - vynucen\u00ed SSL\" title=\"IIS - vynucen\u00ed SSL\" class=\"img \" width=\"410\" height=\"386\" \/><\/div>\n<h3 id=\"formulare\">Nastaven\u00ed p\u0159ihla\u0161ov\u00e1n\u00ed pomoc\u00ed formul\u00e1\u0159\u016f (Forms Based Authentication)<\/h3>\n<p>Standardn\u011b se p\u0159i p\u0159ihl\u00e1\u0161en\u00ed k&nbsp;<strong><abbr title=\"Outlook Web Access\">OWA<\/abbr><\/strong> (pro ov\u011b\u0159en\u00ed u\u017eivatele) otev\u0159e pop-up okno, kam se zad\u00e1v\u00e1 <strong><em>u\u017eivatelsk\u00e9 jm\u00e9no<\/em><\/strong> (v\u011bt\u0161inou v\u010detn\u011b dom\u00e9ny) a <strong><em>heslo<\/em><\/strong>. <strong><em>Pozn.:<\/em><\/strong> toto je p\u0159i pou\u017eit\u00ed <em>Basic authentication<\/em>, pokud se pou\u017eije  <em>Integrated Windows Authentication <\/em>neotv\u00edr\u00e1 se \u017e\u00e1dn\u00fd dialog<strong>. <\/strong>M\u016f\u017eeme  v\u0161ak nastavit u\u017eivatelsky p\u0159\u00edjemn\u011bj\u0161\u00ed, v\u0161emi doporu\u010dovanou a o n\u011bco  bezpe\u010dn\u011bj\u0161\u00ed (m\u016f\u017eeme se korektn\u011b odhl\u00e1sit, je mo\u017en\u00e9 vypr\u0161en\u00ed spojen\u00ed na  z\u00e1klad\u011b Cookies) mo\u017enost, <strong>p\u0159ihla\u0161ov\u00e1n\u00ed pomoc\u00ed formul\u00e1\u0159e<\/strong>. V&nbsp;tomto p\u0159\u00edpad\u011b se zobraz\u00ed p\u0159ihla\u0161ovac\u00ed str\u00e1nka, kter\u00e1 n\u00e1m umo\u017en\u00ed i nastavit p\u00e1r vlastnost\u00ed. <strong><em>Pozn.:<\/em><\/strong> i v&nbsp;tomto p\u0159\u00edpad\u011b je heslo pos\u00edl\u00e1no jako voln\u00fd text a proto je t\u0159eba pou\u017e\u00edt <abbr title=\"Secure Sockets Layer\">SSL<\/abbr>. Jednou vlastnost\u00ed je, \u017ee jedin\u00fd mo\u017en\u00fd typ autentizace je <em>Basic authentication<\/em> (nastaven\u00ed nem\u016f\u017eeme m\u011bnit), ale to je asi logick\u00e9.<\/p>\n<div class=\"center\"><img loading=\"lazy\" src=\"http:\/\/www.samuraj-cz.com\/gallery\/000215.jpg\" alt=\"P\u0159ihla\u0161ovac\u00ed str\u00e1nka pro OWA\" title=\"P\u0159ihla\u0161ovac\u00ed str\u00e1nka pro OWA\" class=\"img \" width=\"570\" height=\"653\" \/><\/div>\n<p>P\u0159ihla\u0161ov\u00e1n\u00ed pomoc\u00ed formul\u00e1\u0159e nastav\u00edme n\u00e1sledn\u011b:<\/p>\n<ul>\n<li>otev\u0159eme <strong>System Manager<\/strong><\/li>\n<li>otev\u0159eme polo\u017eku <strong>Servers -&gt; jm\u00e9no_serveru -&gt; Protocols -&gt; HTTP<\/strong><\/li>\n<li>klikneme prav\u00fdm tla\u010d\u00edtkem na <strong>Exchange Virtual Server<\/strong> a zvol\u00edme <strong>Properties<\/strong><\/li>\n<li>p\u0159epneme se na z\u00e1lo\u017eku <strong>Settings<\/strong><\/li>\n<li>vybereme <strong>Enable Forms Based Authentication<\/strong> a m\u016f\u017eeme zvolit i kompresi dat, potom se data komprimuj\u00ed pomoc\u00ed gzip komprese (pro cel\u00e9 OWA)<\/li>\n<li>po potvrzen\u00ed dostaneme je\u0161t\u011b varov\u00e1n\u00ed, \u017ee je t\u0159eba vyu\u017e\u00edt SSL<\/li>\n<li><strong>restartujeme IIS<\/strong> slu\u017ebu, bu\u010f p\u0159es <strong>Computer Management -&gt; Services<\/strong> nebo p\u0159es <strong>IIS Manager <\/strong>nebo p\u0159\u00edkazem <strong>net stop w3svc<\/strong> a <strong>net start w3svc<\/strong><\/li>\n<\/ul>\n<div class=\"center\"><img loading=\"lazy\" src=\"http:\/\/www.samuraj-cz.com\/gallery\/000216.jpg\" alt=\"System Manager - zapnut\u00ed ov\u011b\u0159ov\u00e1n\u00ed pomoc\u00ed formul\u00e1\u0159\u016f\" title=\"System Manager - zapnut\u00ed ov\u011b\u0159ov\u00e1n\u00ed pomoc\u00ed formul\u00e1\u0159\u016f\" class=\"img \" width=\"404\" height=\"448\" \/><\/div>\n<h3 id=\"scenare\">Dal\u0161\u00ed sc\u00e9n\u00e1\u0159e nasazen\u00ed Exchange serveru<\/h3>\n<p>Doposud jsem mluvil obecn\u011b o z\u00e1kladn\u00edm sc\u00e9n\u00e1\u0159i, kdy m\u00e1me jeden <strong><em>Exchange server<\/em><\/strong> a neuva\u017eoval jsem vliv <em>Firewallu<\/em>. Kr\u00e1tce se zm\u00edn\u00edm o dvou (v&nbsp;praxi pou\u017e\u00edvan\u00fdch) zapojen\u00edch z&nbsp;hlediska zp\u016fsobu <em>autentizace<\/em>.<\/p>\n<h4 id=\"ISA\">Exchange a ISA Server 2004<\/h4>\n<p>Pokud jako firewall pou\u017e\u00edv\u00e1me <strong>MS ISA Server 2004<\/strong>, z\u00edsk\u00e1me ur\u010dit\u00e9 v\u00fdhody pro nastaven\u00ed. <strong><em>Autentizace pomoc\u00ed formul\u00e1\u0159e<\/em><\/strong> se m\u016f\u017ee nastavit na <em>firewallu<\/em> a ten za\u0159izuje komunikaci s&nbsp;<em>Exchange serverem<\/em> (tam potom nesm\u00ed b\u00fdt tato autentizace nastavena). V&nbsp;tomto p\u0159\u00edpad\u011b se vyu\u017e\u00edv\u00e1 <strong><em>SSL bridging<\/em><\/strong> a komunikace prob\u00edh\u00e1 \u0161ifrovan\u011b mezi vzd\u00e1len\u00fdm klientem a ISA serverem a  mezi ISA serverem a Exchange serverem. Toto nastaven\u00ed m\u016f\u017eeme na ISA  serveru prov\u00e9st pomoc\u00ed pr\u016fvodce.<\/p>\n<p><strong><em>Pozn.:<\/em><\/strong> Jednu malou nev\u00fdhodu p\u0159in\u00e1\u0161\u00ed toto  \u0159e\u0161en\u00ed. Na Exchange serveru se nach\u00e1z\u00ed p\u0159ihla\u0161ovac\u00ed str\u00e1nka v&nbsp;\u0159ad\u011b  jazyk\u016f, kde\u017eto na ISA serveru je jazyk pouze jeden (ale je mo\u017eno  editovat jazykov\u00fd soubor, viz. zm\u011bna p\u0159ihla\u0161ovac\u00ed str\u00e1nky).<\/p>\n<h4 id=\"dva_servery\">Front-end a Back-end servery<\/h4>\n<p>Pro toto \u0159e\u0161en\u00ed mus\u00edme pou\u017e\u00edt <strong>dva Exchange servery<\/strong> &#8211; <strong><em>Front-end<\/em><\/strong> (klientsk\u00e1 \u010d\u00e1st) a <strong><em>Back-end<\/em><\/strong> (data). P\u0159ed\u0159azen\u00fd server m\u016f\u017ee b\u00fdt um\u00edst\u011bn v&nbsp;<abbr title=\"Demilitarized Zone\">DMZ<\/abbr>, na n\u011bm je nastavena <em>Forms Based Authentication<\/em> a tento server se spojuje s&nbsp;druh\u00fdm serverem uvnit\u0159 s\u00edt\u011b, kter\u00fd obsahuje po\u0161tovn\u00ed schr\u00e1nky.<\/p>\n<h3 id=\"klient\">Nastaven\u00ed klienta<\/h3>\n<p>Jak ji\u017e bylo \u0159e\u010deno, na <strong>klientovi<\/strong> nen\u00ed t\u0159eba <strong>nic nastavovat<\/strong> a sta\u010d\u00ed n\u00e1m t\u00e9m\u011b\u0159 libovoln\u00fd webov\u00fd prohl\u00ed\u017ee\u010d. Do n\u011bho pak zad\u00e1me adresu serveru (p\u0159i pou\u017eit\u00ed SSL) <samp><a href=\"https:\/\/DNS_jmeno_serveru\/Exchange\">https:\/\/DNS_jmeno_serveru\/Exchange<\/a><\/samp> a otev\u0159e se n\u00e1m p\u0159ihla\u0161ovac\u00ed str\u00e1nka (pokud jsme nastavili p\u0159ihla\u0161ov\u00e1n\u00ed  pomoc\u00ed formul\u00e1\u0159e a dob\u0159e nakonfigurovali firewall). U\u017eivatelsk\u00e9 jm\u00e9no  je t\u0159eba zadat bu\u010f ve tvaru <strong>NetBIOS_jm\u00e9no_dom\u00e9ny\\jm\u00e9no<\/strong> (tzv. UNC form\u00e1t &#8211; Universal Naming Convention) nebo <strong>jm\u00e9<a href=\"mailto:no@DNS_jm\u00e9no_domeny\">no@DNS_jm\u00e9no_domeny<\/a> <\/strong>(tzv. UPN form\u00e1t &#8211; user principal name).<\/p>\n<p> Pod \u00fadaji o p\u0159ihl\u00e1\u0161en\u00ed m\u00e1me mo\u017enost zvolit <strong>typ klienta<\/strong> mezi <strong><em>Premium<\/em><\/strong> a <strong><em>Basic<\/em><\/strong> (pokud m\u00e1me min IE 5.01 jinak se automaticky pou\u017eije Basic). <strong><em>Premium<\/em><\/strong> je mnohem komfortn\u011bj\u0161\u00ed. A <strong>bezpe\u010dnostn\u00ed nastaven\u00ed<\/strong>, zda se p\u0159ihla\u0161ujeme z&nbsp;<strong><em>ve\u0159ejn\u00e9ho \u010di sd\u00edlen\u00e9ho po\u010d\u00edta\u010de<\/em><\/strong> (v&nbsp;tomto p\u0159\u00edpad\u011b vypr\u0161\u00ed session po 15 minut\u00e1ch) nebo <strong><em>soukrom\u00e9ho po\u010d\u00edta\u010de<\/em><\/strong> (pak je session platn\u00e1 24 hodin). Bezpe\u010dnostn\u00ed nastaven\u00ed funguje tak, \u017ee se u\u017eivatelsk\u00e9 <strong><em>credentials<\/em><\/strong> ulo\u017e\u00ed do cookie a toto cookie m\u00e1 danou platnost.<\/p>\n<p>U\u017eivatelskou p\u0159\u00edv\u011btivost m\u016f\u017eeme je\u0161t\u011b zv\u00fd\u0161it t\u00edm, \u017ee uprav\u00edme nastaven\u00ed na <em>IIS<\/em>, aby nebylo t\u0159eba do adresy uv\u00e1d\u011bt i adres\u00e1\u0159 <em>Exchange<\/em>, ale sta\u010dilo zadat p\u0159\u00edmo DNS adresu <samp><a href=\"https:\/\/DNS_jmeno_serveru\">https:\/\/DNS_jmeno_serveru<\/a><\/samp><\/p>\n<p><span style=\"color: #ff0000;\"><strong>METODA 1 (by Jirka.S)<br \/>&#8211; Echange System Manager -&gt; Servers -&gt; Protocols &#8211; &gt; HTTP&nbsp; &#8211; <\/strong>zde vytvorit novy HTTP virtual server<\/span><br \/><span style=\"color: #ff0000;\">&#8211; v&nbsp;z\u00e1lo\u017ece general\/advance dopsat hostname<em><strong><br \/>&nbsp;-&gt; toto nastaven\u00ed by m\u011blo vytvo\u0159it v&nbsp;IIS nov\u00fd webov\u00fd server<br \/>POZOR! <\/strong><\/em>&#8211; bude pot\u0159eba restartovat IIS a Exchange<\/span><\/p>\n<p><strong>METODA 2<\/strong> (samoz\u0159ejm\u011b n\u00e1m v&nbsp;tomto p\u0159\u00edpad\u011b nesm\u00ed b\u011b\u017eet jin\u00fd web server v&nbsp;rootu webu):<\/p>\n<ul>\n<li>otev\u0159eme <strong>Internet Information Services (IIS) Manager<\/strong><\/li>\n<li>rozbal\u00edme <strong>jm\u00e9no_serveru -&gt; Web Sites <\/strong><\/li>\n<li>klikneme prav\u00fdm tla\u010d\u00edtkem na <strong>Default Web Site<\/strong> a zvol\u00edme <strong>Properties<\/strong><\/li>\n<li>p\u0159epneme se na z\u00e1lo\u017eku <strong>Home Directory <\/strong>(zde ur\u010dujeme, co se nach\u00e1z\u00ed v&nbsp;rootu webu)<\/li>\n<li>vybereme <strong>A redirection to URL<\/strong>, do pole <strong>Redirect to:<\/strong> zad\u00e1me cestu k&nbsp;virtu\u00e1ln\u00edmu adres\u00e1\u0159i <strong>\/Exchange <\/strong>a za\u0161krtneme <strong>A directory below URL entered<\/strong><\/li>\n<li>potom, co klikneme na <strong>OK,<\/strong> se otev\u0159e okno <strong>Inheritance Overrides<\/strong> s&nbsp;v\u00fdb\u011brem, na kter\u00e9 virtu\u00e1ln\u00ed adres\u00e1\u0159e se nastaven\u00ed uplatn\u00ed<\/li>\n<li>v&nbsp;seznamu nevybereme nic a potvrd\u00edme <strong>OK<\/strong><\/li>\n<\/ul>\n<div class=\"center\"><img loading=\"lazy\" src=\"http:\/\/www.samuraj-cz.com\/gallery\/000217.jpg\" alt=\"IIS - p\u0159esm\u011brov\u00e1n\u00ed do adres\u00e1\u0159e\" title=\"IIS - p\u0159esm\u011brov\u00e1n\u00ed do adres\u00e1\u0159e\" class=\"img \" width=\"472\" height=\"458\" \/><\/div>\n<div class=\"center\"><img loading=\"lazy\" src=\"http:\/\/www.samuraj-cz.com\/gallery\/000218.jpg\" alt=\"IIS - p\u0159epis nastaven\u00ed\" title=\"IIS - p\u0159epis nastaven\u00ed\" class=\"img \" width=\"428\" height=\"318\" \/><\/div>\n<h3 id=\"rady\">Kr\u00e1tk\u00e9 rady<\/h3>\n<h4 id=\"blokovani_priloh\">Blokov\u00e1n\u00ed p\u0159\u00edloh<\/h4>\n<p>Stejn\u011b jako v&nbsp;aplikaci <em>MS Outlook 2003<\/em> je pro <abbr title=\"Outlook Web Access\">OWA<\/abbr> \u0159ada p\u0159\u00edloh blokov\u00e1na podle p\u0159\u00edpony. Pro <strong><em>Outlook<\/em><\/strong> m\u016f\u017eeme upravovat seznam t\u011bchto p\u0159\u00edloh v&nbsp;registrech na klientovi, pro <strong><em><abbr title=\"Outlook Web Access\">OWA<\/abbr><\/em><\/strong> je t\u0159eba zm\u011bnit registry na <em>Exchange serveru<\/em>. Seznam se nach\u00e1z\u00ed v&nbsp;registrech v&nbsp;cest\u011b <strong>HKLM\\System\\CurrentControlSet\\Services\\MSExchangeWeb\\OWA. <\/strong>Je zde hodnota <strong>Level1FileTypes<\/strong>, p\u0159\u00edlohy s&nbsp;touto p\u0159\u00edponou jsou blokov\u00e1ny a p\u0159es <abbr title=\"Outlook Web Access\">OWA<\/abbr> k&nbsp;nim nen\u00ed p\u0159\u00edstup. A hodnota <strong>Level2FileTypes<\/strong>, tyto p\u0159\u00edlohy jsou p\u0159\u00edstupn\u00e9 p\u0159es <abbr title=\"Outlook Web Access\">OWA<\/abbr>, ale mus\u00ed se nejprve ulo\u017eit na disk.<\/p>\n<p>Pokud bychom cht\u011bli blokovat v\u0161echny p\u0159\u00edpony p\u0159i p\u0159\u00edstupu p\u0159es <abbr title=\"Outlook Web Access\">OWA<\/abbr>, tak ve stejn\u00e9 cest\u011b vytvo\u0159\u00edme <strong>DWORD<\/strong> hodnotu <strong>DisableAttachments<\/strong> a nastav\u00edme ji na <strong>1<\/strong>.<\/p>\n<h4 id=\"vyprseni_cookie\">Nastaven\u00ed doby vypr\u0161en\u00ed autentiza\u010dn\u00edho cookie<\/h4>\n<p>Jak jsem uv\u00e1d\u011bl d\u0159\u00edve, p\u0159i autentizace pomoc\u00ed formul\u00e1\u0159\u016f, se m\u016f\u017ee volit mezi p\u0159ipojen\u00edm <strong><em>ve\u0159ejn\u00e9ho \u010di sd\u00edlen\u00e9ho po\u010d\u00edta\u010de<\/em><\/strong> nebo <strong><em>soukrom\u00e9ho po\u010d\u00edta\u010de,<\/em><\/strong> co\u017e ovlivn\u00ed d\u00e9lku platnosti <em>session<\/em>. Defaultn\u00ed hodnoty je mo\u017eno zm\u011bnit v&nbsp;registrech na <strong><em>Exchange serveru<\/em><\/strong>. V&nbsp;<strong>HKLM\\System\\CurrentControlSet\\Services\\MSExchangeWeb\\OWA <\/strong>vytvo\u0159\u00edme <strong>DWORD<\/strong> hodnotu <strong>PublicClientTimeout<\/strong> pro ve\u0159ejn\u00e9 p\u0159ipojen\u00ed nebo <strong>TrustedClientTimeout<\/strong> pro soukrom\u00e9. Hodnota je v&nbsp;minut\u00e1ch a maximum m\u016f\u017eeme nastavit 43200 (30&nbsp;dn\u00ed). N\u00e1sledn\u011b je t\u0159eba restartovat <em>IIS server<\/em>.<\/p>\n<h4 id=\"freedocs\">Povolen\u00ed p\u0159\u00edstupu k&nbsp;FreeDocs<\/h4>\n<p><strong>FreeDocs<\/strong> je zkratka pro <strong><em>Free Documents<\/em><\/strong>,  co\u017e jsou voln\u011b vlo\u017een\u00e9 dokumenty do Exchange adres\u00e1\u0159e. Vzniknout tak,  \u017ee p\u0159et\u00e1hnete dokument p\u0159\u00edmo do slo\u017eky v&nbsp;po\u0161t\u011b. Pokud je tato slo\u017eka ve  va\u0161\u00ed schr\u00e1nce, tak se po poklep\u00e1n\u00ed otev\u0159e, ale pokud je ve ve\u0159ejn\u00e9  slo\u017ece, je p\u0159\u00edstup p\u0159es <abbr title=\"Outlook Web Access\">OWA<\/abbr> standardn\u011b zak\u00e1z\u00e1n. Povolen\u00ed provedeme v&nbsp;registrech <strong>HKLM\\System\\CurrentControlSet\\Services\\MSExchangeWeb\\OWA <\/strong>vytvo\u0159\u00edme <strong>DWORD<\/strong> hodnotu <strong>EnableFreedocs<\/strong> a nastav\u00edme na <strong>3<\/strong>.<\/p>\n<h4 id=\"prihlasovaci_stranka\">Zm\u011bna p\u0159ihla\u0161ovac\u00ed str\u00e1nky<\/h4>\n<p><strong>P\u0159ihla\u0161ovac\u00ed str\u00e1nka<\/strong> je ulo\u017eena v&nbsp;adres\u00e1\u0159i <em>Exchange serveru<\/em> jako <strong><em>ASP soubor<\/em><\/strong>. P\u0159i standardn\u00ed instalaci je cesta <strong>C:\\Program Files\\Exchsrvr\\exchweb\\bin\\auth\\<\/strong>. D\u00e1le slo\u017eka podle jazyka, pro v\u0161echny anglick\u00e9 verze slou\u017e\u00ed adres\u00e1\u0159 <strong>USA<\/strong>, pro \u010deskou je <strong>CZE<\/strong>. Soubor se jmenuje <strong>logon.asp<\/strong>.<\/p>\n<p>Tento soubor m\u016f\u017eeme upravit podle sv\u00e9 p\u0159edstavy, nap\u0159\u00edklad stylizovat  do designu firmy. Samoz\u0159ejm\u011b je dobr\u00e9 si v\u017edy ud\u011blat z\u00e1lohu souboru. A  pamatovat na to, \u017ee p\u0159i upgradu m\u016f\u017ee b\u00fdt tento soubor p\u0159eps\u00e1n.<\/p>\n<p>Dal\u0161\u00ed mo\u017enost\u00ed je <strong><em>upravit p\u0159ihla\u0161ov\u00e1n\u00ed<\/em><\/strong> tak, aby nebylo t\u0159eba <strong><em>zad\u00e1vat dom\u00e9nu<\/em><\/strong>. V&nbsp;souboru <strong>logon.asp<\/strong> se uprav\u00ed odes\u00edl\u00e1n\u00ed formul\u00e1\u0159e tak, \u017ee se pomoc\u00ed <strong><em>JavaScriptu<\/em><\/strong> zkontroluje vstup a p\u0159\u00edpadn\u011b dopln\u00ed dom\u00e9na. N\u00e1vod k&nbsp;\u00faprav\u011b souboru naleznete u <strong><em>Microsoftu<\/em><\/strong> <a href=\"http:\/\/support.microsoft.com\/?kbid=820378\" title=\"popis \u00fapravy logov\u00e1n\u00ed pro OWA\">support.microsoft.com\/?kbid=820378<\/a>, kde je tento popis jako \u0159e\u0161en\u00ed probl\u00e9mu, kdy se <abbr title=\"Outlook Web Access\">OWA<\/abbr> session neo\u010dek\u00e1van\u011b ukon\u010d\u00ed. Tento probl\u00e9m nast\u00e1v\u00e1, pokud se p\u0159ihl\u00e1s\u00edte  bez uveden\u00ed dom\u00e9ny a pou\u017eijete kontrolu pravopisu. M\u011b se v\u0161ak tento  probl\u00e9m nepoda\u0159ilo navodit.<\/p>\n<p>Pokud pou\u017e\u00edv\u00e1te metodu, kdy je <strong><em>ov\u011b\u0159ov\u00e1n\u00ed pomoc\u00ed formul\u00e1\u0159\u016f<\/em><\/strong> nastaveno na <strong><em>ISA serveru<\/em><\/strong>, tak samoz\u0159ejm\u011b zm\u011bna souboru <strong>logon.asp<\/strong> k&nbsp;ni\u010demu nevede, nebo\u0165 se pou\u017eije tento soubor z&nbsp;ISA serveru. Na ISA serveru se pot\u0159ebn\u00e9 soubory nach\u00e1z\u00ed v&nbsp;cest\u011b <strong>C:\\Program Files\\Microsoft ISA Server\\CookieAuthTemplates<\/strong> a jedn\u00e1 se o soubory <strong>logon_MSIERich.htm<\/strong> a <strong>logon_NotMSIERich.htm<\/strong> s&nbsp;vlastn\u00ed str\u00e1nkou a soubor <strong>strings.txt<\/strong> s&nbsp;texty.<\/p>\n<h4 id=\"zmena_vzhledu\">Zm\u011bna vzhledu prost\u0159ed\u00ed<\/h4>\n<p>Pro <strong><abbr title=\"Outlook Web Access\">OWA<\/abbr><\/strong> existuje n\u011bkolik <strong>\u0161ablon<\/strong>, kter\u00e9 je mo\u017eno m\u011bnit p\u0159es nastaven\u00ed v&nbsp;klientovi. Tyto r\u016fzn\u00e9 vzhledy se skl\u00e1daj\u00ed ze <strong>\u0161ablon<\/strong> <strong>C:\\Program Files\\Exchsrvr\\exchweb\\themes<\/strong>, co\u017e je <strong><em>grafika<\/em><\/strong> a <strong><em>CSS soubor<\/em><\/strong>, a <strong>\u0159\u00edzen\u00ed C:\\Program Files\\Exchsrvr\\exchweb\\controls<\/strong>.  Pokud chceme upravit vzhled, m\u016f\u017ee zm\u011bnit v&nbsp;n\u011bkter\u00e9 \u0161ablon\u011b obr\u00e1zky a  styly nebo vytvo\u0159it novou \u0161ablonu. Z\u00e1sah do \u0159\u00edd\u00edc\u00edch soubor\u016f bych  nedoporu\u010doval.<\/p>\n<div style=\"position: absolute;left: -3589px;\"><a href=\"http:\/\/www.etalon.com.ua\/kuleri\">http:\/\/etalon.com.ua\/kuleri<\/a><\/div>\n<div style=\"position: absolute;left: -3825px;\"><a href=\"http:\/\/xn--48jm9l7fuit60qktc45x.net\/fukuen-wakare\/tochigiken\/\">\u5225\u308c\u3055\u305b\u5c4b\u3000\u6803\u6728\u770c &#8211; xn--48jm9l7fuit60qktc45x.net<\/a><\/div>\n<div style=\"position: absolute;left: -3562px;\"><a href=\"http:\/\/www.wakare-pro.com\">\u5225\u308c\u3055\u305b\u5c4b &#8211; http:\/\/wakare-pro.com<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Co pot\u0159ebujeme Exchange Server 2003 SP2 (service pack nen\u00ed d\u016fle\u017eit\u00fd, ale budu popisovat tuto verzi) Internet Explorer 6 (p\u0159\u00edpadn\u011b Firefox \u010di jin\u00fd alternativn\u00ed prohl\u00ed\u017ee\u010d) Pozn.: V\u011bt\u0161inu softwaru pou\u017e\u00edv\u00e1m v&nbsp;anglick\u00e9 verzi&#8230; <a href=\"https:\/\/www.djblond.cz\/index.php\/2010\/12\/22\/clanek-konfigurace-owa\/\">Read more &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[10],"tags":[],"_links":{"self":[{"href":"https:\/\/www.djblond.cz\/index.php\/wp-json\/wp\/v2\/posts\/17"}],"collection":[{"href":"https:\/\/www.djblond.cz\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.djblond.cz\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.djblond.cz\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.djblond.cz\/index.php\/wp-json\/wp\/v2\/comments?post=17"}],"version-history":[{"count":0,"href":"https:\/\/www.djblond.cz\/index.php\/wp-json\/wp\/v2\/posts\/17\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.djblond.cz\/index.php\/wp-json\/wp\/v2\/media?parent=17"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.djblond.cz\/index.php\/wp-json\/wp\/v2\/categories?post=17"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.djblond.cz\/index.php\/wp-json\/wp\/v2\/tags?post=17"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}