Solved

Single forest or multiple forests

Posted on 2007-12-05
2
709 Views
Last Modified: 2011-11-12
We have a NY office .com and a London office .co.uk. The NY office is a single domain/forest configuration and so is the London domain. Both offices have their own Exchange servers.

The UK office is planning to migrate their the mailboxes onto a new Exchange server on the NY .com domain. This server will be hosted in London.

My question is do we go for a single forest or multiple forests with forest trusts between NY and UK. The users want one GAL and have the ability to connect to mailbox calendars from each site.

Thanks in advance
0
Comment
Question by:Atticusit
2 Comments
 
LVL 21

Expert Comment

by:mcsween
ID: 20411730
For simplicity of manangement I would definatly use one forest.  If you want to segregate them for administrative purposes you can setup a different domain in the same forest for each site.  If your administrators maintain both sites then I would suggest just 1 domain in 1 forest.
0
 

Accepted Solution

by:
intersum earned 125 total points
ID: 20411735
Without knowing much more detail about you guys I can only sug my personal preference...  For this I make the following assumptions..
1) the NY office is the bigger of the two
2) you dont mind having to move all your PC's and servers to a new domain.
3) Your link between sites is quite chunky (2 Meg dedicated if just mail and AD replication 10meg min if files to be accessed as well)
4) Each site will maintain its own Internet connection

So... I would do the following.
Move to a single forrest with just the top level domain.  Create sites for both NY and london and give them each 2 x DC's with NY holding the FMSO roles.  Have separeate containers in AD for each site subdivided with PC, User, Security Group and Mail group containers etc.  NY to have 2 x DNS\WINS servers set with external DNS servers as its forwarders, London at least one DNS\WINS server with one forwarder set to NY and the other to external DNS server.
MX records for both ny.com and london.co.uk will point to front end exchange in NY so you can still get mail to the old addresses.  Each site will have its own backend server or exchange cluster to hold its mailboxes if using exch 2007 replicated mailboxes on the other server incase either of the backends go down.  Thats just the very basics I'm sure others on here will have a different opinion which may work better for you but this one will do the following.

1) meet the GAL requirment
2) Allow single flat forrest with minimum authentication over the site link
3) Have an online mailbox backup should one of the exchange backends fall over
4) Route all incoming mail through a single gateway
5) allow each site to route its outgoing mail via its own internet connection.
6) allow you to implement 2 site links one over dedicated bandwidth (MPLS etc) and use the internet connections for a backup VPN.

Hope this helps.... Just done a similar thing and its working well!

0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question