1 Exchange Box, 2 Domains - One User Account

[Vini]

We've just created a trust between our domain, and our sister companies domain.

CompanyA (DomainA), hosts 12 servers, one being Exchange 2007.

CompanyB (DomainB), has 3 servers.

CompanyB uses our Exchange server for their email, in order to do so they need a username on their DomainB and also on our DomainA.

By introducing a trust, with hope to be able to remove this requirement and allow Exchange to pickup new users added in dB Active Directory.

We've looked at http://technet.microsoft.com/en-us/l.../aa996314.aspx but this seems to cover everything we have in place already.

The problem is that Exchange console is only looking at dA and we cannot work out how to allow it to look at both domains...

[Vini]

Both Forests are Win2k3. There's a VPN connecting us both. We can communicate with the domains. We just want to be able to add their domain to our search scope effectively.

Looking into it a little more, and we've got;



What the hell are we missing?

[Moby-Dick]

have you run domainprep in the other domain ?

[Vini]

have you run domainprep in the other domain ?

Cheers Moby, I was hoping you'd see this...

I didnt set the original network up, so I'm not 100%. I would imagine it was run at the time.

Is running forestprep/domainprep now advisable? Given that the image above, is how we are running today.

If it is, do we just run it with standard settings, presumably this is to invoke a refresh?

[Moby-Dick]

if the second domain is on a seperate forest , I'd have thoguht you'd need forestprep and domain prep on it. I'll check with a collegue.

he's 98% sure you'll need to do it on the second domain.

[Vini]

if the second domain is on a seperate forest , I'd have thoguht you'd need forestprep and domain prep on it. I'll check with a collegue.

he's 98% sure you'll need to do it on the second domain.

forestprep run on the domain in the other forest. what now though? the prop waiting game?

domainprep wouldnt run, I presume the changes from domainprep is run as part of forestprep, thats what was insinuated when trying to run it...

[Moby-Dick]

give it a bit of time to replicate fully (are you happy replication is running ? )

[Vini]

give it a bit of time to replicate fully (are you happy replication is running ? )

Not with this second domain no.

In Forest1, we have four sites, three are DC's in other countries (UK, EU, US) - Replication is ok there.

The fourth site, is the DC of the domain we're trying to 'view'. The site doesn't show it as being assigned to a domain, under the Domain Column...

[Moby-Dick]

have you seen this ?

http://technet.microsoft.com/en-us/l...bb123524.aspxI

I'm guessing thats how you currently operate ?

if the mailboxes are on forestA , then they will need an associated ( if hidden ) account on that forest.

you may end up having to migrate uses from the B to A.

[Vini]

have you seen this ?

http://technet.microsoft.com/en-us/l.../bb123524.aspx

I'm guessing thats how you currently operate ?

if the mailboxes are on forestA , then they will need an associated ( if hidden ) account on that forest.

you may end up having to migrate uses from the B to A.

http://technet.microsoft.com/en-us/l.../bb123524.aspx extra I in your link...

We can't create linked mailboxes, as we cannot see the second domain in AD/Exchange

If we could see the second domain, there'd be no real reason for a linked Mailbox, would there?

[Moby-Dick]

can you connect to the other forest from ADUC ?

[Vini]

can you connect to the other forest from ADUC ?

By going to Actions > Connect to Domain yes... unfortunately it switches AD to the other domain.

We just want both domains to show in ADUC without having to do that, surely it's possible somehow?

[Moby-Dick]

no I dont think thats possible as they are different forests.

if they where parent/child domains then you could.

as they are seperate directory trees, its not going to happen.

[Vini]

no I dont think thats possible as they are different forests.

if they where parent/child domains then you could.

as they are seperate directory trees, its not going to happen.

Ok then, so this is how it works at present.

Our users in Forest2, DomainB have a user account on AD there. And also a User account on Forest1, DomainA... Purely for mailbox purposes.

The problem we have is that they need two usernames/pw's, surely there's a way around this?

[Moby-Dick]

not without migrating the domainB into forest A - I'll keep hunting for a different solution but at the moment that would be the best way of integrating your infrastructures

[Vini]

Oh. Damn.

Many thanks for your efforts though!