[mwm523]

I have a customer with a Windows 2003 Active Directory domain, with Exchange 2003, running BES 4.0.3 for Exchange.

They have a separate Windows 2000 Active Directory domain, with Exchange 2000, in the same building for a specific division of the company.

There is currently NO trust relationship between the domains.

Is it possible for the two separate AD domains with 2 separate Exchange servers to share the single BES? What would have to be done to make this happen, if possible?

I did some searches on these forums, and found some fairly vague references to creating a trust between the domains, etc., but then others that say the domains would need to be in the same forest for the BES to communicate with both.

Anyone know the correct answer?


Thanks,

-Mike

[dev]

That's correct....a single forest with multiple domains.

[mwm523]

Win2K domain is not in the same forest as the Win2K3 domain. Therefore, this becomes much more challenging... :(

[easy-v]

Originally Posted by mwm523

There is currently NO trust relationship between the domains.

No Trust = No worky

It would be imposible for it to work without modifiying the trust relationship.

Think about it for a sec, how could a nontrusted PC in a different domain do a lookup in AD? It couldn't, becuase there are no permissions for it to.

Are these domains in the same forest? Are these 2 seperate exchange organisations?

I would assume that it is, as you can only have one Exchange organisation per forest.

Sounds like you folks have some AD engineering to do.

[clyde_turkey]

Your cheapest solution is to buy another BES.
Two separate Exchange Organizations kills any hope you have of getting a single BES to talk to both.
In 3.6 you could fudge it with a second BES instance and a trust relationship between the two forests, but 4.0 does not allow such a set-up.

[mwm523]

Originally Posted by easy-v

No Trust = No worky

It would be imposible for it to work without modifiying the trust relationship.

Think about it for a sec, how could a nontrusted PC in a different domain do a lookup in AD? It couldn't, becuase there are no permissions for it to.

Are these domains in the same forest? Are these 2 seperate exchange organisations?

I would assume that it is, as you can only have one Exchange organisation per forest.

Sounds like you folks have some AD engineering to do.

I understand that a trust would be necessary for this to have any shot of working. My question was, will it work with a trust between two domains in different forests with different Exchange organizations. I see the answer is no.

I guess I'll have to use the ADMT to migrate the Win2k domain to a new domain tree in the Win2k3 forest, and migrate the mailboxes to a server in the Ex2k3 org...

Big project...

[besnewbie]

Hi, Along the same lines - where do I find the installation instructions to use one Bes server for multiple domains within the same forest using one Exchange organization with multiple Exchange servers in both domains?

Thanks.