Lotus Notes 8.5.3 Administration

Course Code: DSCA853
Product: Lotus Notes/Domino R8.5.3
Duration: 3 days
Topics/Pages: 19 topics / 482 pages
Price (US dollars):
$65 per user


During this course you will use Domino Administrator as you learn to perform Notes-specific administration tasks such as registering users and controlling Notes configuration using policies.

Course Goals

In this course, you will learn how to:

  • describe the primary administration concepts of Notes and Domino, including Domino Domain, Organization, Organizational Units, Domino Named Networks, Domino Directory, Registration Server, Home/ Mail Server, Administration Process, and Administration Server
  • set up Domino Administrator, configure Administration Preferences, and use Domino Administrator to manage Notes users
  • perform a basic Notes user registration to understand the outcomes of the process
  • create an Organizational Unit Certifier hierarchy
  • configure a Certifier ID to include contact information, multiple passwords, and support for alternate languages and names
  • implement the Certificate Authority process, migrate Certifier IDs to the Certificate Authority, and give administrators CAA and/or RA rights
  • define explicit and organizational policies with Registration, Setup, Desktop, Security, Roaming, and Mail Settings
  • register Notes users using all the options, the CA Process, and Registration Settings
  • define Security Settings to set ECLs, encrypt local replicas, and set Mail security options, and enforce client security settings
  • use the Administration Process to automate user identity changes and to recertify expired certificates
  • lock out unauthorized users from servers and databases
  • enforce passwords and password changes and institute a custom password policy
  • recover a lost User ID or forgotten password
  • deploy local replica databases including Mail (both managed and unmanaged) and Mobile Directory Catalog, custom Welcome Pages, Bookmarks, and custom tips of the day
  • define a policy to control user Mail preferences
  • define policy hierarchies that inherit or enforce settings
  • track active Notes and other client users to ensure license compliance
  • update Notes software using Upgrade By Mail and Notes Smart Upgrade
  • administer the Notes Standard configuration client and the other applications that run in the Eclipse framework and create a Domino-based Eclipse Update Site.


This course is designed for administrators responsible for managing Notes clients.

Whereas the Lotus Domino Administration Basics course covers general Domino Server installation and configuration, this course focuses on the administration of Notes clients.

This course is also distinguished from the Lotus Notes Support course, which is designed for help desk personnel who do not have Domino Administrator or administrative rights to the Domino Server but who are responsible for installing, setting up, and supporting Notes clients. Depending on your responsibilities, you may need the additional knowledge presented in this course to learn the administrator side of supporting Notes clients.

While ideally you will have completed the Domino Administration Basics course before taking this course, doing so is not required. The first Topic in this course reviews the necessary concepts of Notes administration and how to use Domino Administrator.

This course is part of a series of Domino administration training courses. Follow these paths to master all aspects of administering the Domino Server, Lotus Notes, and other clients:

Courses later in the series assume that you have mastered the content of earlier courses.

This course is designed for administrators who are responsible for supporting Lotus Notes clients and who:

  • may have never administered a Domino Server
  • are proficient Lotus Notes 8.5+ users.

Courses later in the series assume that you have mastered the content of earlier courses.

This course is designed for administrators who are responsible for supporting Lotus Notes clients and who:
  • may have never administered a Domino Server
  • are proficient Lotus Notes users.

You will find this course most useful if prior to this course you have:
  • studied the principles and operation of personal computer networking using TCP/IP in LAN/WAN/Internet environments
  • installed and supported the operating system used in this course (Windows) and applications used by those systems
  • installed, administered, and supported other types of servers found on a typical network.

You will find the course especially rewarding if you have already installed a Domino Server and a handful of Notes clients and have had some experience designing Domino databases.


This course is sold as a 3-day course.

Course design

This course combines concept presentations, demonstrations, and exercises to guide your learning. Though designed for instructor-lead classes, with the proper equipment and software individuals can also use this course for self-study.

Please consult the Set Up document for this course to make sure the correct environment is in place before starting the course.


Topic 1: Set Up and Tour Domino Administrator 
Important definitions
Start Domino Administrator
Exercise: Set up Notes using the Notes Configuration Wizard
Domino Administrator user interface
Typical sequence to use Domino Administrator
Get Administrator Help
Exercise: Domino Administrator interface
Remote Server Console
Administration Preferences
Change to another location
Start Domino Administrator to Local
Open specific administrative databases
Domino Web Administrator

Topic 2: Domino Administrator Security
Effective Administrator access
General Server access
Administrator access on Security tab
Full Access administrator mode
Administrator access to the Domino Directory
Administrator access to system databases

Topic 3: Notes User Registration 
What is Notes user registration?
The role of a Person document
Incidental results of user registration
No user count limits
Results of first server setup
Importance of system databases being replicas
Review of administrative rights required to register a user
Guided Exercise: Notes user registration

Topic 4: Organizational Unit Certifiers
Hierarchy of Certifiers
Advantages of Organizational Units
Disadvantages of Organizational Units
Register users with Organization Certifier
Create OU Certifier from Organization Certifier
Create OU Certifier from OU Certifier
Guided Exercise: Create Organizational Unit Certifier
Guided Exercise: Register user under Organizational Unit
Certifier ID file security

Topic 5: Configure Certifier IDs 
Task 1: Rollover O/OU Certifier ID keys to highest strength possible
Task 2: Add Contact information to a Certifier document
Task 3: Add multiple passwords to the Certifier ID
Task 4: Add support for alternate languages to a Certifier ID

Topic 6: Certificate Authority Process 
CA Process in general
Use CA Process to register Notes users
Advantages of using the CA Process over using Certifier ID files
Prerequisites to configure the CA Process
CA Process configuration
Step 1: Start the CA Process (server) task
Step 2: Migrate the Organization Certifier ID to the CA Process
Step 3: Unlock or activate the Certifier
Determine Certifier status
Refresh Certifiers available to CA Process
Verify active Certifiers
Step 4: Migrate any OU Certifier IDs to CA Process
Step 5: Add or delete CAAs or RAs
Step 6: Register users with CA Process
Exercise: Migrate OU Certifier to CA Process
Repair ICL database

Topic 7: Prepare Policies and Settings 
Policy document defined
Settings document defined
Policy and Settings flexibility and planning
How Policies and Settings are applied
Policy type
Choosing between Organizational and Explicit policies
Exercise: Create Policy and Settings documents
Assign Explicit policies to users
Assignment Method 1: Set default Explicit policy for registrations
Assignment Method 2: Assign Explicit policy during registration
Assignment Method 3: Dynamic Policies
Assignment Method 4: Add Explicit policy name to Person document
Effective policy and precedence order
Machine specific Policy settings
What you cannot control with policies
How to Apply settings
Troubleshooting policy updates at the Notes client

Topic 8: Prepare to Register Users
Task 1: Ensure that users have unique names and addresses
Task 2: Add user to appropriate group(s)
Task 3: Define Registration Settings document
Exercise: Registration Settings
Task 4: Define Setup Settings document
Exercise: Setup Settings
Task 5: Create Notes User ID Vault and define Security Settings
Task 6: Set Administration Preferences
Exercise: Set Administration Preferences

Topic 9: Notes User Registration and Setup
Register tool
Basics tab
Mail tab
Address tab
ID Info tab
Groups tab
Roaming tab
Other tab
Exercise: Register user
Registration Queue
Other sources for user names and settings
Register users from a text file
Windows directory integration
Exercise: Set up Notes user

Topic 10: ECL, Database, and Mail Security 
Execution Control Lists and Design signatures
Administrator control over ECLs
Administration ECL
Refresh client ECL with Administration ECL
Admin ECL in the Security Settings document
Exercise: Security Settings policy
Encrypt replica databases on laptops
Replica encryption in the Desktop Settings document
Notes mail security
Force encryption of all incoming mail at the server
Do not show remote images in emails
Mail Security in the Desktop Settings document
Exercise: Desktop Settings policy
Push trusted certificates to local Contacts

Topic 11: Notes User ID Password Management 
User responsibilities
Default password behavior
Password strength
Custom password policy
Custom password policy caveats
Increase password security with password verification
Enable password verification and expiration
Part 1: Enable password verification on the server
Part 2: Enable password verification for users
How password verification and expiration work
Password verification and expiration anomalies
Lock out User ID
Compare Public Keys
Minimum and maximum client level
Internet password synchronization with Notes ID password
Users can override Internet password synchronization
Automatically lock idle User ID
Windows password synchronization
Integrated Windows Authentication for Eclipse

Topic 12: Notes User ID Vault 
Old and new mechanisms to recover from User ID problems
Create a Notes User ID Vault database
Exercise: Create a Notes User ID Vault database
Configure Security Settings document
Upload User ID to vault database
Exercise: Upload User ID of existing users
Download User ID from vault
Forgotten password recovery
Notes User ID Vault logging

Topic 13: Desktop, Roaming, Symphony Settings 
Deploy replica databases
Managed Mail Replicas
Deploy Mobile Directory Catalog
Deploy custom Home Pages
Home Page Advanced Configuration Editor
Notes System Diagnostic
Automatic Diagnostic Collection
Configure Automatic Diagnostic Collection
Windows Management and Sidebar
Desktop Settings policy to control KeyView file format filters
Custom Settings
Upgrade new user to roam using Domino as repository
Upgrade existing user to roam using Domino as repository
Upgrade user to roam using file server as repository
Confirm roaming status
Disable roaming for a user
Symphony Settings document

Topic 14: Mail Application Preferences 
Mail Settings document
Balance features with support concerns
Differences from other types of policies
Tell AdminP to process Mail Settings
Enable Inbox Maintenance agent
Enable sent message recall
Out-of-Office notification
Recent Contacts and drop down type ahead addressing
Synchronize Contacts

Topic 15: Policy Hierarchies and Inheritance
Policy hierarchies
Create policy hierarchy
Inherit settings assignment
Policy Viewer
Inherit and enforce specific settings in a policy hierarchy
Find Policy that applies to a user
Exception policies

Topic 16: Notes License Compliance 
Certification Log
Client Access Licenses
Server\Licenses view
License tracking
Notes version tracking

Topic 17: User ID Changes 
Minimum Administrator access requirements
Administration Server requirements
Procedure 1: Rename user (Administrator initiated)
Exercise: Rename user
Revert user rename change if timed out or rejected
Rename Web-only users
Find Users
Procedure 2: Rename user (User requested)
Procedure 3: Move a user to another Organizational Unit
Procedure 4: Recertify expiring User ID (Administrator initiated)
Exercise: Recertify User ID
Procedure 5: Recertify expiring User ID (User initiated)
Procedure 6: Recertify expired User ID
Procedure 7: Update Person document with Public Key from ID
Procedure 8: Rollover users Private and Public Keys
Procedure 9: Delete user
Procedure 10: Lock out user from servers
Procedure 11: Rename or delete group
Procedure 12: Re-register user

Topic 18: Install a New Version of Notes 
Notes installation kit
Reinstalling Notes is safe
Run the installer
First step: Determine the existing version
Upgrade by (Notes) Mail
Mail Conversion Utility
Notes Smart Upgrade
Configure and use Smart Upgrade
Notes software installation and operating system security
Smart Upgrade Governor
SUCACHE Server Console commands
Smart Upgrade failover
Smart Upgrade Tracking Reports
Smart Upgrade debugging
Seamless Mail Upgrade
Upgrade ODS of databases on Domino using COMPACT
Upgrade ODS of local Notes databases

Topic 19: Standard Configuration Administration 
Notes Standard configuration and Eclipse
IBM Lotus Symphony Applications
Integrated IBM Connections
Composite Application Editor
Feeds Sidebar Application
Integrated Sametime client
Integrated IBM Lotus Quickr
My Widgets Sidebar Application
Add a Notes plug-in from an Eclipse Update Site
Eclipse Update Site
Update Manager in Notes
Application Management
Web server as the Update Site
Domino as the Update Site
Composite Application component installation and update
Administrator control over update sites
Notes client update