Using Windows Vista and Outlook 2007 in a Windows Small Business Server 2003 Network

  • Article

The "Update for Windows Small Business Server 2003: Windows Vista and Outlook 2007 compatibility (KB 926505)" for the Microsoft® Windows® Small Business Server 2003 server software with Service Pack 1 and Windows Small Business Server 2003 R2 (Windows SBS) includes the following:

  • Support for the Business, Ultimate, and Enterprise versions of the Windows Vista™ operating system (including 32-bit and 64-bit editions). This update does not support Windows Vista Home editions because they do not support business networking or Remote Desktop.
  • Updated Client Deployment tools so you can configure the newer versions of the components in Windows Vista.
  • A change that makes a user who is assigned to a computer that is running Windows Vista an administrator in Admin Approval Mode.
  • Changes to Windows Firewall configuration for client computers that are running Windows Vista.
  • Configuration of the Microsoft Office Outlook® 2007 messaging and collaboration client (MAPI profile, not Outlook deployment) for client computers that are running Windows XP or Windows Vista.
  • A small change in the user experience when joining Windows Vista to the Windows SBS domain using https://server/ConnectComputer to address Internet Explorer 7 in Protected Mode.
  • Changes to Remote Desktop settings that support Windows XP and Windows Vista.
  • Changes to the Power Management settings to support Remote Desktop.

How to Obtain the Windows Vista Update for Windows Small Business Server

You can download the "Update for Windows Small Business Server 2003: Windows Vista and Outlook 2007 compatibility (KB 926505)" from the Microsoft Web site. For more information about obtaining the update, see the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=78386).

Additional Downloads

Depending on the version of Windows SBS that is running on your server, you need to install additional downloads as listed in Table 1. Except where indicated in Table 1, these may be downloaded and installed in any order, either before or after installing KB 926505.

Table 1.   Additional downloads for the Windows Vista Update

Download Name Windows SBS Version Description

KB Article 911829

You receive an error message when you try to perform any editing tasks, or you must click to enable the compose frame in Outlook Web Access.

https://go.microsoft.com/fwlink/?LinkId=77013

Windows SBS 2003 with Service Pack 1 (Standard or Premium Edition)

Windows SBS 2003 R2 (Standard or Premium Edition)

Required to enable users who are accessing Outlook Web Access (OWA) on Windows Vista to perform any editing tasks, such as composing or replying to e-mail.

User Profile WMI provider

https://go.microsoft.com/fwlink/?LinkId=78007

Important
To enable users to access existing documents and settings after the client computer is joined to the domain, download and install the User Profile WMI Provider to each client computer that is running Windows Vista before you use https://servername/ConnectComputer. You do not need to install the provider if you do not have existing local user documents or settings. Log on to the client computer that is running Windows Vista, and then download and install the User Profile WMI Provider (https://go.microsoft.com/fwlink/?LinkId=78007).

Windows SBS 2003 with Service Pack 1 (Standard or Premium Edition)

Windows SBS 2003 R2 (Standard or Premium Edition)

Required to enable users to access documents and user settings for their existing user profiles after the computer that is running Windows Vista joins the Windows SBS domain.

Microsoft Internet Security and Acceleration (ISA) Server 2004 Standard Edition Service Pack 2

https://go.microsoft.com/fwlink/?LinkId=77017

Windows SBS 2003 with Service Pack 1 (Premium Edition only)

Windows SBS 2003 R2 (Premium Edition only)

Required to enable synchronization between Windows Vista Outlook Client and the Exchange mailbox on the server that is running Windows SBS.

KB Article 930414

Description of the ISA Server 2004 update

https://go.microsoft.com/fwlink/?LinkId=77019

Note

You must install Service Pack 2 for ISA Server 2004 before you install this update.

Windows SBS 2003 with Service Pack 1 (Premium Edition only)

Windows SBS 2003 R2 (Premium Edition only)

Required to enable you to join an x64 computer that is running Windows Vista to the domain.

Firewall Client for ISA Server

https://go.microsoft.com/fwlink/?LinkId=77006

Windows SBS 2003 with Service Pack 1 (Premium Edition only)

Windows SBS 2003 R2 (Premium Edition only)

Note

Download this update to a shared location on the server that is running Windows SBS, and then install it on the client computers that are running Windows Vista.

Required to resolve a compatibility error that you receive on client computers that are running Windows Vista. This new version of Firewall Client supports Windows Vista, Windows XP, and Windows 2000.

Important

After you install the "Update for Windows Small Business Server 2003: Windows Vista and Outlook 2007 compatibility (KB 926505)," if you run Windows SBS Setup from Add/Remove programs for Client Deployment tools to either reinstall or in maintenance mode, you must reinstall the update on the server.

Additional Manual Configuration Steps

Depending on the platform (32-bit or 64-bit editions) of Windows Vista that the client computer is running and the program that you want to use or configure, you might need to make additional manual configurations or changes in how you complete a task (see Table 2).

Table 2.   Additional manual configurations or changes needed for the Windows Vista Update

Feature / Component Manual step(s)

Fax Client

You must manually enter the server name when you send the first fax. (TAPI settings are configured by Client Setup.)

For more information, see the Fax section, later in this document.

Connection Manager

This is not supported for 64-bit editions of Windows Vista. You need to manually configure the virtual private network (VPN) with a Remote Desktop connection or use Remote Web Workplace to connect to a desktop computer at work.

For more information, see the Connection Manager section later in this document.

Offer Remote Assistance to Windows Vista

An offer of Remote Assistance from a computer that is running Windows XP to a computer that is running Windows Vista is not supported. However, if a user sends a request for remote assistance from a computer that is running Windows Vista to a computer that is running Windows XP, it is supported.

For more information, see the Remote Assistance section, later in this document.

Mobile Device Configuration

Download Windows Mobile Device Center, and then manually configure the settings for the Microsoft Windows Mobile® software that are specific to Windows SBS.

For more information, see the Active Sync 3.8 section, later in this document.

Self-signed certificate for client computers that are not in the domain

The certificate options, in order of more security offered, are as follows:

  • Purchase a trusted certificate.
  • Create a USB key with the sbscert.cert certificate for users to install from.
  • Let users know that this specific instance is okay.

For more information, see the Remote Web Workplace section, later in this document.

Additional Partner Updates

Download updates for Exchange for Outlook Web Access and ISA Server.

Changes to Client Setup

This section helps you join a client computer that is running Windows Vista to the Windows SBS network and application deployment via the Windows SBS Client Setup tools.

Windows Vista Editions that are Supported by Windows Small Business Server 2003

The following Windows Vista editions are supported by the Windows SBS Client Setup tools: Windows Vista Business, Ultimate, and Enterprise. Although unsupported Windows Vista editions can access a limited set of features as a non-domain joined client computer, it is not recommended that you use them as client computers within the Windows SBS local network. For example, Windows Vista Home Edition can view Remote Web Workplace, even though is it not joined to the Windows SBS domain. For Windows Vista editions that are not supported by Windows SBS, you can purchase an online upgrade to a supported version by using the Windows Anytime Upgrade at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=80637).

Visit the Desktop Technology Compatibility Chart for Windows SBS 2003 at the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=75019) to determine if the operating system running on the client computer is supported.

Changes to Client Application Deployment

This section discusses the installation behavior of applications that are deployed by using the Windows SBS setup tools, such as the Computer Set Up Wizard and the Assign Application Wizard. These applications include the following: Connection Manager, the Microsoft ActiveSync® 3.8 technology, Internet Explorer 6, and Outlook 2003.

Because Windows Vista includes newer versions of applications that are deployed by the Client Setup tools, the installation behavior has been changed. Table 3 summarizes the different application deployment behavior when using Client Setup tools for their deployment.

Table 3.   Windows SBS Client Setup Applications deployment behavior

Name of the Application Deployed on 32-bit Windows Vista (Yes/No) Deployed on 64-bit Windows Vista (Yes/No)

Client Operating System Service Packs

No

No

Internet Explorer 6

No

No

Outlook 2003

Yes, if Outlook 2007 is not already installed

Yes, if Outlook 2007 is not already installed

ActiveSync 3.8

No

No

Connection Manager

Yes

No

Fax

The Windows Fax and Scan optional component is enabled, if necessary.

The Windows Fax and Scan optional component is enabled, if necessary.

Client Operating System Service Packs

The service packs for client-computer operating systems that are included with Windows SBS do not apply to Windows Vista.

Connection Manager

The Windows SBS Connection Manager package is not compatible with a 64-bit computer that is running Windows Vista. Therefore, even if you choose to deploy this application during the Set Up Computer Wizard, it is not installed on a 64-bit computer that is running Windows Vista. The Windows SBS Connection Manager package is compatible with a 32-bit computer that is running Windows Vista.

See the Connection Manager section later in this document for details on manually configuring a VPN connection.

ActiveSync 3.8

The version of ActiveSync 3.8 that is included with Windows SBS is not compatible with Windows Vista. Therefore, even if you choose to deploy this application during the Set Up Computer Wizard, it is not installed on the computer that is running Windows Vista. To enable data synchronization between Windows Mobile-powered devices and Windows Vista, download the Windows Mobile Device Center from one of the following locations at the Microsoft Web site:

Internet Explorer 6

The Client Setup tools for Windows SBS deploy Internet Explorer 6 when it is selected for deployment. Because a later version of Internet Explorer (Internet Explorer 7) is already installed on Windows Vista operating systems, even if you choose to install Internet Explorer 6 to Windows Vista, it is not installed on the computer that is running Windows Vista.

Note

If you select Internet Explorer in the Advanced Client Computer Settings in the Set Up Computer Wizard, Internet Explorer 7 settings in Windows Vista are configured and the following Web site links are added to the Favorites list: Microsoft Windows Small Business Server Website, My company's internal Web site, Remote E-mail Access, Information and Answers, and Remote Server Management. In addition, the home page is set to be the https://companyweb Web site.

Outlook 2003

Client Setup tools for Windows SBS deploy Outlook 2003 when it is selected for deployment. If the computer that is running Windows Vista or Windows XP has Outlook 2007 already installed on it, then Outlook 2003 is not deployed.

Note

If you select Outlook 2003 Profile Settings in the Advanced Client Computer Settings page of the Set Up Computer Wizard, then Outlook 2007 settings are configured.

Fax

Because Windows Vista includes a newer version of Fax Client, if you choose to deploy Fax and it was not already installed on the computer that is running Windows Vista, it is installed from the Windows Vista Optional Components. Select the Fax settings in Advance Settings in the Set Up Computer Wizard to configure the TAPI settings.

Note

If you choose to not deploy fax, but you select the Advanced Client Computer Settings for Fax printer in the Set Up Computer Wizard, then the TAPI settings are configured if the fax components are detected on the computer that is running Windows Vista. However, the fax account must still be manually configured.

Changes to Group Policy Objects to Support Windows Vista

Some Group Policy objects (GPOs) in Windows SBS have been changed to support client computers that are running Windows Vista in a Windows SBS network. When joined to the Windows SBS domain, the following GPOs apply to Windows Vista:

  • A new GPO, Small Business Server - Windows Vista policy, has been added. This GPO addresses the Windows Vista Firewall settings, by enabling the security center and adjusting power management settings to support Remote Desktop. If the computer that is joined to the domain is connected to the Windows SBS network, the Windows Vista Firewall policy settings for the domain profile are enabled for the following rule sets:
    • File and Print Sharing
    • Remote Desktop
    • Remote Assistance
    • Core Networking If the computer that is joined to the domain is not connected to the Windows SBS network (for example, if you take your laptop on a trip), its network location automatically changes to either Public or Private. In this case, the default Windows Firewall policy settings for the public/private network profile are used.

Note

The existing SBS Windows Firewall GPO applies only to client computers that are running Windows XP with SP2 and above.

  • In the SBS Client Computer GPO, only the policy settings that are related to Internet Connection Sharing (ICS) apply to Windows Vista. The Welcome page is not disabled by the Windows Vista GPO.

If you want to change the domain Group Policy objects for managing client computers that are running Windows Vista, use Group Policy Management Console from a computer that is running Windows Vista and that is joined to the Windows SBS network.

Note

If you look at the Group Policy settings in the Server Management Console, the policy settings for the Small Business Server - Windows Vista policy GPO appear as registry keys. You can view these policy settings from a client computer that is running Windows Vista.

To edit the "Small Business Server - Windows Vista policy" GPO

  1. From a client computer that is running Windows Vista, log on as a domain administrator, click Start, and then type gpmc.msc in the search box.

  2. In Group Policy Management Console, click Forest:DomainName, click Domains, click DomainName, and then click Group Policy Objects.

  3. Right-click Small Business Server – Windows Vista policy, and then click Edit.

  4. In Group Policy Object Editor, browse to the appropriate GPO, and then modify the settings as needed.

  5. Click Apply, and then click OK

  6. Close Group Policy Object Editor, and then close Group Policy Management Console.

  7. To force the Group Policy settings to be applied, either run gpupdate /force from a command prompt with elevated privileges or restart the client computer.

Changes that Affect Information Workers

There are several changes to the user experience for the features that relate to information workers who are running Windows Vista. Additionally, there are several ways for the Windows SBS administrator to adjust the user experience.

My Documents Redirection

The Windows SBS feature for My Documents Redirection works well with the Windows Vista features for Offline Files and restoring previous versions.

  • By default, Offline Files support is enabled in Windows Vista. This means that if My Documents Redirection is enabled on the server, the user’s documents are available from both the user’s shared folder on the server and also locally on the client computer that is running Windows Vista, even when the computer that is running Windows Vista is disconnected from the network.
  • Windows Vista also supports previous file versions. If My Documents Redirection is enabled on the server, previous versions of the user’s documents are saved on the server. The default setting for the file version to be saved to the server is 7:00 A.M. Previous version files on the server are available only if the user is connected to the network. They are not available if the user is working offline.

Remote Access

This section discusses changes in Remote Desktop, Remote Assistance, Remote Web Workplace, and Connection Manager.

Remote Desktop

When you join a computer that is running Windows Vista to a Windows SBS network, the Remote Desktop setting is set to Allow connections from computers running any version of Remote Desktop.

If you want to further secure your remote connections between Windows XP and Windows Vista, install the latest the latest RDP 6.0 application. You can download this application from the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=78012). Also, change the Remote Desktop setting to Allow Connections from computers running Remote Desktop with Network Level Authentication on each computer that is running Windows Vista in your Windows SBS network. You can change the Remote Desktop setting either manually on individual computers or globally for all client computers in the network that are running Windows Vista by using Group Policy.

Changing Remote Desktop Settings for Individual Client Computers

Use the following procedure to manually change the Remote Desktop setting for a client computer that is running Windows Vista.

To manually change the Remote Desktop setting for a client computer that is running Windows Vista

  1. From a client computer that is running Windows Vista, click Control panel, and then double-click System.

  2. In the Task Pane, click Remote Settings.

  3. In the User Account Control message box, click Continue.

  4. In the Remote Desktop section, select Allow Connections from computers running Remote Desktop with Network Level Authentication.

Changing Remote Desktop Settings for All Client Computers

Use the following procedure to use Group Policy to change the Remote Desktop setting for all computers that are running Windows Vista in the Windows SBS network. This requires that all users connecting to the Windows SBS network are either running Windows Vista or have the RDP 6.0 client installed on their computer that is running Windows XP.

To update Windows Vista Group Policy settings to globally change Remote Desktop settings for all client computers that are running Windows Vista

  1. From a client computer that is running Windows Vista, click Start, and then type gpmc.msc in the search box.

  2. In Group Policy Management Console, click Forest:DomainName, click Domains, click DomainName, and then click Group Policy Objects.

  3. Right-click Small Business Server – Windows Vista policy, and then click Edit.

  4. In Group Policy Object Editor, in Computer Configuration, click Administrative Templates, click Windows Components, click Terminal Services, click Terminal Server, and then click Security.

  5. In the details pane, double-click Require user authentication using RDP 6.0 for remote connections.

  6. Click Enable, click Apply, and then click OK. Close Group Policy Object Editor, and then close Group Policy Management Console.

  7. To force the Group Policy settings to be applied, either run gpupdate /force from a command prompt with elevated privileges or restart the client computer.

Power Management Settings

By default, in the Small Business Server - Windows Vista policy GPO, Specify the System Sleep Timeout (Plugged in) and Specify the System Hibernate Timeout(Plugged in) are set to Enabled to support Remote Desktop Connection. These settings ensure that, if the client computer that is running Windows Vista is plugged in, it does not enter the sleep or hibernate modes. This enables network users to access client computers that are running Windows Vista remotely.

If you want to optimize for power management instead of for Remote Desktop support, you can disable these Power Management Group Policy settings and configure Windows Vista to use Wake-on-LAN (WoL). WoL wakes up a computer that is running Windows Vista and prevents it from sleeping or hibernating when a remote connection is made. See the computer manufacturer's documentation to learn more about how to configure Wake-On-LAN settings.

To disable Power Management settings in the "Small Business Server - Windows Vista policy" GPO for all client computers running Windows Vista

  1. From a client computer that is running Windows Vista, click Start, and then type gpmc.msc in the search box.

  2. In Group Policy Management Console, click Forest:DomainName, click Domains, click DomainName, and then click Group Policy Objects.

  3. Right-click Small Business Server – Windows Vista policy, and then click Edit.

  4. In Group Policy Object Editor, in Computer Configuration, click Administrative Templates, click System, click Power Management, and then click Sleep Settings.

  5. In the details pane, double-click Specify the System Sleep Timeout (Plugged in).

  6. Click Disabled, click Apply, and then click OK.

  7. In the details pane, double-click Specify the System Hibernate Timeout (Plugged in).

  8. Click Disabled, click Apply, and then click OK

  9. Close Group Policy Object Editor, and then close Group Policy Management Console.

  10. To force the Group Policy settings to be applied, either run gpupdate /force from a command prompt with elevated privileges or restart the client computer.

Remote Assistance

An administrator can send an offer to help a user on the Windows SBS network, or user can request help from an administrator or from another user on the network.

If a user sends a request for help to the administrator or to another user, the sending and receiving computers can be either running Windows XP or Windows Vista. However, if an administrator offers help to a user who is running Windows Vista and the user does not send a remote assistance request, the administrator must be running Windows Vista. Table 4 list the different supported scenarios for offering Remote Assistance to and from Windows XP, the Microsoft Windows Server® 2003 operating system, and Windows Vista.

Table 4.   Remote Assistance support behavior when the administrator offers remote assistance

Send Remote Assistance Offer (Sender) Receive Remote Assistance Offer (Receiving Client Computer) Supported? Method for Offering Remote Assistance

Windows XP or Windows Server 2003

Windows Vista

Not supported

If the administrator is not using a client computer that is running Windows Vista, the administrator can use Remote Web Workplace to make a remote desktop connection to Windows Vista in the Windows SBS network and then send the offer of remote assistance to the computer of the user needing help.

Windows Vista

Windows XP or Windows Server 2003

Supported

Use the Remote Assistance feature in Remote Web Workplace, or use the method listed for assistance between two computers that are running Windows Vista.

Windows Vista

Windows Vista

Supported

Log on to a computer that is running Windows Vista, create a VPN connection to the Windows SBS network, and then use Remote Assistance to offer help.

Remote Web Workplace

You need to manually install the security certificate (sbscert.cer) on the computer that is running Windows Vista, if it is not joined to the domain, to avoid the error message that you get when you use Remote Web Workplace. For step-by-step instructions, see the Troubleshooting article "I get an error message about a self-signed certificate when I browse to Remote Web Workplace from a computer that is running Windows Vista and that is not joined to the Windows Small Business Server domain."

Connection Manager

You cannot use Connection Manager to remotely access the Windows SBS network from a 64-bit client computer that is running Windows Vista. Instead, you must manually configure a VPN connection and then use Remote Desktop Connection. This is because the Connection Manager package in Windows SBS is not compatible with 64-bit editions of Windows Vista.

To connect to the Windows SBS network from a 64-bit computer, either you can use Remote Web Workplace or you can manually configure a VPN connection. For step-by-step instructions, see the Troubleshooting article "I cannot deploy Connection Manager using the Setup Configuration Wizard on computers that are running 64-bit editions of Windows Vista."

Fax

The first time a user sends a fax, the user’s fax account must be configured.

To configure fax in Windows Vista

  1. From a computer that is running Windows Vista, open Windows Fax and Scan.

  2. Click New Fax.

  3. Click Connect to a fax server on my network.

  4. Type the name of the server that is running Windows SBS, for example \\servername. If you do not know the name of the server, click Start, type cmd, and then type set sbsserver.

  5. Type a name for the fax account, such as Server.

Printer

There are certain known issues when using shared printers with Windows Vista in a Windows SBS network, as listed below:

  • Deleting the shared printer from the server does not automatically delete the printer from Windows Vista. You need to manually delete the printer from the computer that is running Windows Vista.
  • Printers are not deployed by the Client Setup tools on client computers that are running x64 Windows Vista. You need to manually configure the printers on the client computers that are running x64 Windows Vista.
  • Changes to the name of a shared printer on the server are not reflected on a client computer that is running Windows Vista. You must log on to each client computer that is running Windows Vista and manually delete the printer by using the old name of the shared printer . You can then manually add the printer to the client computer by using the new name of the shared printer. This issue does not apply to Windows XP client printers.
  • When a printer is deployed to Windows Vista, if the correct driver is not found on the computer that is running Windows Vista, the user is prompted to accept the installation of the printer driver when the computer that is running Windows Vista is configured for the Windows SBS network.