Re: Exchange 2003 Design Issues

From: Steve Schiemann[MSFT] (sschiem_at_online.microsoft.com)
Date: 05/08/04 

Date: Sat, 8 May 2004 09:18:49 -0500

I don't think it makes a big difference whether you go with one domain in
the internal network, or 3 domains internally. Transitive trusts between
domains in a forest make the forest more of a security boundary than a
domain. Installing E2k3 Enterprise edition in the root would allow you to
create multiple stores/storage groups, and dedicate them to any user objects
in the forest. If you do go with multiple domains internally, just remember
to run /domainprep and create a Recipient Update Service for each domain.
More planning info is found here:
http://www.microsoft.com/technet/prodtechnol/exchange/2003/library/messsyst.mspx 

-- 
Steve Schiemann
Microsoft Exchange Support
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
This posting is provided "AS IS" with no warranties, and confers no rights.
"Rob" <robhiggins@rocketmail.com> wrote in message
news:6CCA62DC-A253-4A18-A37F-3D5AABD9A833@microsoft.com...
> Currently at our IT dept in a private school we are designing a new
network.  We have purchased 28 Dell servers and are in the design process
deciding how to configure the domains and exchange 2003.  Our current design
includes 4 domains. 3 on the internal network (foo.org, staff.foo.org,
student.foo.org all in the same forest) and a perimiter network domain
(web.foo.com in a totally different forest)  We are going to install
exchange 2003 Enterprise server in a cluster. Question is, since i just
started aat this position, the reason they are creating the 3 internal
domains is for "security" to separate the staff domain from the student
domain.  Problem comes when trying to figure out if installing exchange 2003
on the foo.org domain will allow us to setup 2 different information stores
that will service the staff.foo.org and the student.foo.org concurrently.
When we add users to the staff or student domain we want the exchage server
to create a mailbox for them.  Is this even feasible, or is the proper
solution to create one domain foo.org inside and separate the staff and
students by OU's?  Keep in mind we don't mind the extra administration of
the extra domains as long as that is the most secure environment.  Excahnge
2003 is our maindesign problem with the extra domains though. 1150 students
200 staff. 600+ desktops.
>

Relevant Pages

  • Re: AD structure for a school environment
    ... You have to assume that servers in the untrusted network are "dirty". ... parent staff domain and child student domain. ... staff PCs to the student file server. ...
    (Focus-Microsoft)
  • Re: AD forest layout recommendations
    ... we are implementing separate network level ... > protections in order to directly address security issues. ... > from student machines. ... >> A) GCs will authenticate for any domain in the forest, ...
    (microsoft.public.windows.server.active_directory)
  • Re: 2 DCs in single domain with 2 Vlans
    ... If you have a mailserver in one domain in a forest and like to use it in another domain in the forest you have to run exchange /domainprep in the domain without exchange to prepare AD for the needed attributes. ... Staff A and Staff B. Each one is separated by different ... one is on for instance 172.16.a.b network and the other is on a ... DHCP/DNS/Printer/Antivirus server as the company doesn't have enough ...
    (microsoft.public.windows.server.active_directory)
  • Re: School district and creative way to handle student passwords ?
    ... Byron, I thought about this, but a forest isn't more adequate when you have ... I will put a one-way trust where staff can access student resources, ... >> sure that the domain accounts and DCs for the student account were both ...
    (microsoft.public.security)
  • Creating subnets
    ... I am busy setting up a network in a school and need to have more than one ... subnet as we will run out of ip addresses when new PCs are purchased soon. ... Seperate servers are being run up for staff and students respectively. ... I would like Staff to have access to the Student SERVER, ...
    (microsoft.public.windows.server.sbs)