Lotus Notes 8.5.1 Administration

Course Code: DSCA851
Product: Lotus Notes/Domino R8.5.1
Duration: 3 days
Topics/Pages: 20 topics / 480 pages
Price (US dollars):
$65 per user


During this course you will use Domino Administrator as you learn to perform Notes-specific administration tasks such as registering users and controlling Notes configuration using policies.

Course Goals

In this course, you will learn how to:

  • describe the primary administration concepts of Notes and Domino, including Domino Domain, Organization, Organizational Units, Domino Named Networks, Domino Directory, Registration Server, Home/ Mail Server, Administration Process, and Administration Server
  • set up Domino Administrator, configure Administration Preferences, and use Domino Administrator to manage Notes users
  • perform a basic Notes user registration to understand the outcomes of the process
  • create an Organizational Unit Certifier hierarchy
  • configure a Certifier ID to include contact information, ID/Password Recovery Information, multiple passwords, and support for alternate languages and names
  • implement the Certificate Authority process, migrate Certifier IDs to the Certificate Authority, and give administrators CAA and/or RA rights
  • define explicit and organizational policies with Registration, Setup, Desktop, Archiving, Security, and Mail Settings
  • register Notes users using all the options, including ID/Password Recovery Information, the CA Process, and Registration Settings
  • define Security Settings to set ECLs, encrypt local replicas, and set Mail security options, and enforce client security settings
  • use the Administration Process to automate user identity changes and to recertify expired certificates
  • lock out unauthorized users from servers and databases
  • enforce passwords and password changes and institute a custom password policy
  • recover a lost User ID or forgotten password
  • deploy local replica databases, a Mobile Directory Catalog, custom Welcome Pages, Bookmarks, and custom tips of the day
  • define a policy to control user Mail preferences
  • define policy hierarchies that inherit or enforce settings
  • track active Notes and other client users to ensure license compliance
  • update Notes software using Upgrade By Mail and Notes Smart Upgrade
  • administer the Notes Standard configuration client and the other applications that run in the Eclipse framework and create a Domino-based Eclipse Update Site.


This course is designed for administrators responsible for managing Notes clients.

Whereas the Lotus Domino 8 Administration Basics course covers general Domino Server installation and configuration, this course focuses on the administration of Notes clients.

This course is also distinguished from the Lotus Notes 8 Support course, which is designed for help desk personnel who do not have Domino Administrator or administrative rights to the Domino Server but who are responsible for installing, setting up, and supporting Notes clients. Depending on your responsibilities, you may need the additional knowledge presented in this course to learn the administrator side of supporting Notes clients.

While ideally you will have completed the Domino 8 Administration Basics course before taking this course, doing so is not required. The first Topic in this course reviews the necessary concepts of Notes administration and how to use Domino Administrator.

This course is part of a series of Domino administration training courses. Follow these paths to master all aspects of administering the Domino Server, Lotus Notes, and other clients:

Courses later in the series assume that you have mastered the content of earlier courses.

This course is designed for administrators who are responsible for supporting Lotus Notes clients and who:
  • may have never administered a Domino Server
  • are proficient Lotus Notes 8.5+ users.
Courses later in the series assume that you have mastered the content of earlier courses.

This course is designed for administrators who are responsible for supporting Lotus Notes clients and who:
  • may have never administered a Domino Server
  • are proficient Lotus Notes 8 users.

You will find this course most useful if prior to this course you have:
  • studied the principles and operation of personal computer networking using TCP/IP in LAN/WAN/Internet environments
  • installed and supported the operating system used in this course (Windows XP Professional), as well as applications used by those systems
  • installed, administered, and supported network operating system server and workstation software.

You will find the course especially rewarding if you have already installed a Domino Server and a handful of Notes clients and have had some experience designing Domino databases.


This course is sold as a 3-day course.

Course design

This course combines concept presentations, demonstrations, and exercises to guide your learning. Though designed for instructor-lead classes, with the proper equipment and software individuals can also use this course for self-study.

Please consult the Set Up document for this course to make sure the correct environment is in place before starting the course.


Topic 1: Set Up and Tour Domino Administrator 
Important definitions
Start Domino Administrator
Exercise: Set up Notes using the Notes Configuration Wizard
User interface
Typical sequence to use Domino Administrator
Get Administrator Help
Exercise: Domino Administrator interface
Remote Server Console
Administration Preferences
Change to another location
Start Domino Administrator to Local
Open specific administrative databases
Domino Web Administrator

Topic 2: Domino Administrator Security 
Effective Administrator access
General Server access
Administrator access on Security tab
Full Access administrator mode
Administrator access to the Domino Directory
Administrator access to system databases

Topic 3: Notes User Registration 
What is Notes user registration?
The role of a Person document
Incidental results of user registration
No user count limits
Results of first server setup
Review of administrative rights required to register a user
Guided Exercise: Notes user registration

Topic 4: Organizational Units 
Hierarchy of Certifiers
Advantages of Organizational Units
Disadvantages of Organizational Units
Register users with Organization Certifier
Create OU Certifier from Organization Certifier
Create OU Certifier from OU Certifier
Guided Exercise: Create Organizational Unit Certifier
Guided Exercise: Register user under Organizational Unit
Certifier ID file security

Topic 5: Configure Certifier IDs
Task 1: Rollover O/OU Certifier ID keys to highest strength possible
Task 2: Add Contact information to the Certifier document
Task 3: Add recovery information to the Certifier ID
Exercise: Add recovery information
Task 4: Add multiple passwords to the Certifier ID
Task 5: Add support for alternate languages to a Certifier ID

Topic 6: Certificate Authority Process 
CA Process in general
Use CA Process to register Notes users
Advantages of using the CA Process over using Certifier ID files
Prerequisites to configure the CA Process
CA Process configuration
Step 1: Start the CA Process (server) task
Step 2: Migrate the Organization Certifier ID to the CA Process
Step 3: Unlock or activate the Certifier
Determine Certifier status
Refresh Certifiers available to CA Process
Verify active Certifiers
Step 4: Migrate any OU Certifier IDs to CA Process
Step 5: Add or delete CAAs or RAs
Step 6: Register users with CA Process
Exercise: Migrate OU Certifier to CA Process
Repair ICL database

Topic 7: Prepare Policies and Settings 
Policy document defined
Settings document defined
Policy and Settings flexibility and planning
How Policies and Settings are applied
Policy type
Choosing between Organizational and Explicit policies
Exercise: Create Policy and Settings documents
Assign Explicit policies to users
Assignment Method 1: Set default policy for registrations
Assignment Method 2: Assign policy during registration
Assignment Method 3: Dynamic Policies
Assignment Method 4: Edit Person document
Effective policy and precedence order
What you cannot control with policies
Lock down user preferences
Troubleshooting policy updates at the Notes client

Topic 8: Prepare to Register Users 
Task 1: Ensure that users have unique names
Task 2: Add user to appropriate group(s)
Task 3: Define Registration Settings document
Exercise: Registration Settings
Task 4: Set Administration Preferences
Exercise: Set Administration Preferences
Task 5: Define Setup Settings document
Exercise: Setup Settings

Topic 9: Notes User Registration and Setup
Register tool
Basics tab
Mail tab
Address tab
ID Info tab
Groups tab
Roaming tab
Other tab
Exercise: Register user
Registration Queue
Other sources for user names and settings
Register users from a text file
Import text file contents
Windows directory integration
Exercise: Set up Notes user

Topic 10: Security Settings
Execution Control Lists and Design signatures
Administrator control over ECLs
Administration ECL
Refresh client ECL with Administration ECL
Admin ECL in the Security Settings policy document
Exercise: Security Settings policy
Encrypt replica databases on laptops
Replica encryption in the Desktop Settings policy document
Notes mail security
Force encryption of all incoming mail at the server
Mail Security in the Desktop Settings policy document
Exercise: Desktop Settings policy
Automatically lock idle User ID

Topic 11: User ID Password Control
User responsibilities
Default password behavior
Password strength
Custom password policy
Custom password policy caveats
Increase password security with password verification
Enable password verification and expiration
Part 1: Enable password verification on the server
Part 2: Enable password verification for users
How password verification and expiration work
Password verification and expiration anomalies
Lock out User ID
Compare Public Keys
Minimum and maximum client level
Internet password synchronization with Notes ID password
Users can override Internet password synchronization
Windows password synchronization

Topic 12: User ID and Password Recovery
Problem 1: Lost User ID
Problem 2: User ID file was deleted by the user
Exercise: Recover ID file
Problems with password recovery
Problem 3: User forgot User ID password
Problem 4: User ID password has been compromised

Topic 13: Notes User ID Vault 
User ID problems and ID Recovery process
Notes User ID Vault database
Create a Notes User ID Vault database
Exercise: Create a Notes User ID Vault
Configure Security Settings document
Upload User ID to vault database
Exercise: Upload User ID of existing users
Download User ID from vault
Forgotten password recovery
Notes User ID Vault logging

Topic 14: Desktop, Roaming, and Symphony Settings
Deploy replica databases
Deploy Mobile Directory Catalog
Deploy custom Home Pages
Home Page Advanced Configuration Editor
Notes System Diagnostic
Automatic Diagnostic Collection
Configure Automatic Diagnostic Collection
Custom Settings
Upgrade user to roam using Domino as repository
Upgrade user to roam using file server as repository
Confirm roaming status
Disable roaming for a user
Symphony Settings document

Topic 15: Mail Settings 
Mail Settings document
Balance features with support concerns
Differences from other types of policies
Tell AdminP to process Mail Settings
Enable sent message recall
Out-of-Office notification
Recent Contacts and drop down type ahead addressing
Synchronize Contacts

Topic 16: Policy Hierarchies and Inheritance
Policy hierarchies
Create policy hierarchy
Inherit settings assignment
Policy Viewer
Inherit and enforce specific settings in a policy hierarchy
Find Policy that applies to a user
Exception policies

Topic 17: Notes License Compliance 
Certification Log
Client Access Licenses
Server\Licenses view
License tracking
Notes version tracking

Topic 18: User ID Changes
Administrator access required
Administration Server requirements
Procedure 1: Rename user (Administrator initiated)
Exercise: Rename user
Revert user rename change if timed out or rejected
Rename Web-only users
Find Users
Procedure 2: Rename user (User initiated via Notes Mail)
Procedure 3: Move a user to another Organizational Unit
Procedure 4: Recertify expiring User ID (Administrator initiated)
Exercise: Recertify User ID
Procedure 5: Recertify expiring User ID (User initiated)
Procedure 6: Recertify expired User ID
Procedure 7: Update users Private and Public Keys
Procedure 8: Delete user
Procedure 9: Lock out user from servers
Procedure 10: Rename or delete group
Procedure 11: Re-register user
Procedure 12: Set recovery information after user registration

Topic 19: Notes Software Upgrade
Notes software installation
Notes upgrade installation
First step: Determine the existing version
Upgrade by (Notes) Mail
Mail Conversion Utility
Notes Smart Upgrade
Configure and use Smart Upgrade
Notes software installation and operating system security
Smart Upgrade Governor
SUCACHE Server Console commands
Smart Upgrade failover
Smart Upgrade Tracking reports
Smart Upgrade debugging
Seamless Mail template upgrade
Upgrade ODS using COMPACT

Topic 20: Standard Configuration Administration 
Notes Standard configuration
Activities Sidebar application
Sametime Sidebar application
My Widgets Sidebar Application
IBM Lotus Symphony Applications
Composite Applications
Using WebSphere Portal portlets in Composite Applications
Security and Composite Applications
Add a Notes plug-in from an Eclipse Update Site
Eclipse Update Site
Update Manager in Notes
Application Management
Web server as the Update Site
Domino as the Update Site
Composite Application component installation and update
Administrator control over update sites
Notes client update