Re: Ex2003 ADC /schemaonly

From: Steven Halsey [MSFT] (Stevhal_at_Online.Microsoft.com)
Date: 07/23/04


Date: Thu, 22 Jul 2004 23:07:55 -0700


ADC Questions/Answers:
1. Can you install ADC into a Child Domain?
Yes. You'll won't need to run Exchange ADC Setup /SchemaOnly in the Root
domain if you have already run Exchange 2003 Forest Prep in the Root
domain. Exchange 2003 forestprep included the Schema Expansions for ADC. If
you ran Exchange 2000 forest prep then you'll still need to run the ADC
/shemaonly in the root domain. Then create a service account in the child
domain and add the service account to the Child Domain's Built-in
administrators group. When you install ADC be sure to specify this service
account. You will need to use the Enterprise Administrator Account to
install the ADC server.

2. Having the Child Account Adminitrate the ADC?
Since your child domain will be in mixed mode, you'll have to setup some
special permissions to use the Child Account. Once Exchange is installed
any Exchange Administrator who is delegated as a Full Organization
Administrator can Administrate ADC Connection Agreements, so you could
delegate the child administrator as a Full Org Administrator. Before that
time you can set up the ADC Permissions for the child. Before you create
any connection agreements, but after ADC is installed. Run as Enterprise
Administrator a tool like ADSIEdit (available in Windows Tool Kit). Open
the Configuration Container, then the Services, then Microsoft Exchange, and
last open the Active Directory Connections. Get the Properties of the
Active Directory Connections Container and go to the Security Tab. Add the
Child Administrator Here with full permissions, and make sure it inherits to
child objects.

3. Where to install ADC server?
It can run on a DC or a member server. Since ADC service is recommended to
have the Built-in Permission so ADC has high credentials and could run on
the DC. As far as I know there isn't an official recommendation, you might
want to post again to the NewsGroups about the ADC spot, because you might
not get an answer on this thread again. I'll ask around to see if there is
a consensus.

-- 
Steven Halsey
Stevhal@online.microsoft.com
Microsoft Exchange
Please do not send email directly to this alias.  This alias is for
newsgroup purposes only.
This posting is provided "AS IS" with no warranties, and confers no rights.
"Joan" <anonymous@discussions.microsoft.com> wrote in message
news:uhFSnhEcEHA.1248@TK2MSFTNGP11.phx.gbl...
> Scenario: Empty Root with one child domain that was upgraded from NT4. The
> child has 2 DCs and 2 NT4 BDCs and is where we will install Ex2003 onto a
> member server. Both root and child are mixed mode -- we can't go native
yet
> as 5.5 happens to be on both BDCs. Also, while our site will have the
Ex2003
> server, we will still have 5 other 5.5 sites (geographically dispersed) in
5
> different NT4 domains for many months yet (the NT4 domains will be
migrated,
> the sites will be kept and an Ex2003 server will replace the 5.5 server).
>
> A few questions about the ADC...
>
> We need to be able to administer the ADC with a child domain admin
account.
> That means we need to install it onto a child DC, given that we are in
mixed
> mode. I'm fine with installing the ADC onto a child DC using the root
Admin
> account as long as after the install a child domain Admin can administer
it.
> Will that work?
>
> Also, if I want to install the ADC onto a child DC with a child Admin
> account, do I still (as I read was necessary with Ex2000) need to run the
> ADC setup with the /schemaonly switch on a root DC first? I've already run
> /forestprep on the root DC that is the Schema Master. I'm about to run
> /domainprep on both a root DC and a child DC.
>
> Also, typically on which server is the ADC installed? Is it installed onto
a
> DC or the first Ex2003 server (a member server)?
>
> Thanks,
> Joan
>
>


Relevant Pages

  • Re: Ex2003 ADC /schemaonly
    ... Can you install ADC into a Child Domain? ...
    (microsoft.public.exchange.setup)
  • Re: Ex2003 ADC /schemaonly
    ... I'll just use root Admin to administer ADC in child in meantime. ... Can you install ADC into a Child Domain? ... > any Exchange Administrator who is delegated as a Full Organization ...
    (microsoft.public.exchange.setup)
  • Re: Standalone Subordinate Certificate Server Problems
    ... the first time that i try to install the certificate from the root (on the ... child) i get the message "The format of the specified computer name is ... the root CA is also updated with all the necessary patches. ... other server can install ...
    (microsoft.public.win2000.security)
  • Re: ADC Replication Problems
    ... "The Exchange 5.5 directory still contains ... I am using the ADC from sp1, ... am being held up b/c the Exch2k3 install warns me that everything hasnt been ... >> AD. Replication in AD probably didnt complete before i installed the ADC. ...
    (microsoft.public.exchange.setup)
  • Re: ADC replication issues.
    ... i managed to install CRM 4.0 and it is working fine(i ... Furthermore, on ADC when i type control sysdm.cpl and goes to Computer Name, ... that RPC server is unavailable. ...
    (microsoft.public.windows.server.active_directory)