Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 785
  • Last Modified:

Exchange connection across domain trust

We have an existing 2003 exchange environment and when we went to upgrade we found out our config is not supported.

So we built a new domain (domain2) and built a 2010 exchange environment with a mailbox server, a hub transport, and a CAS.  Everything works great from outside the network.  We set up a two way trust between domain1 and domain 2

The issue is when a user in domain1 tries to connect to the new exchange server.  It gives a variety of different issues.  We have tried to connect Outlook to the AD server instead of the CAS, and that sometimes will work for the name resolution, but then Outlook crashes later.  It seems to be related to accessing the address list.

If we log into the exact same machine as a local user (no domain) it works just like it does from outside.

There is a hotfix from MS that is supposed to deal with a lot of 2010 issues, but I wanted to see if there was something with the trust that may be causing this issue.
0
TacoFlavoredKisses
Asked:
TacoFlavoredKisses
  • 4
  • 3
1 Solution
 
Adam BrownSr Solutions ArchitectCommented:
Are both domains in the same forest? Exchange tends to be a little finicky when there are two organizations in the same forest.
0
 
TacoFlavoredKissesAuthor Commented:
Sorry for the delay.  They are in separate forests.
0
 
Adam BrownSr Solutions ArchitectCommented:
Okay. It's even worse when you've going from forest to forest. Usually you need a go-between product to handle authentication for Exchange between forests. Microsoft's Identity LifeCycle Manager (ILM) is built to handle that type of situation. The big issue is that Exchange doesn't properly communicate authentication information for users across a trust link. Trusts in general only provide SID translation between forests and Exchange needs a little more than that to work properly.
0
Prepare for your VMware VCP6-DCV exam.

Josh Coen and Jason Langer have prepared the latest edition of VCP study guide. Both authors have been working in the IT field for more than a decade, and both hold VMware certifications. This 163-page guide covers all 10 of the exam blueprint sections.

 
TacoFlavoredKissesAuthor Commented:
That is too bad.

If we were to make the trust one way only and not trust domain a in domain b would this resolve the issue and now appear as a non trusted user?
0
 
Adam BrownSr Solutions ArchitectCommented:
Possibly. They would be required to enter credentials in the other domain, though. Without the trust, there's no way for them to be authenticated in the other domain, so they have to have a usable account in that domain to do anything in it. Trusts allow you to access most things in domain b using an account located in domain a. However, Exchange can't read or recognize the user in domain a properly, so you would need to create a user in domain b for that user to have access to the domain b exchange features, which is how you would handle authentication between domains without a trust. The problem is that you lose the single sign on capabilities. The user in domain a will have to enter credentials for domain b any time they try to access resources in that domain. Make sense?
0
 
TacoFlavoredKissesAuthor Commented:
Makes perfect sense.  Unless there is another way we aren't thinking of this seems like the best option.  So I will have them use accounts for domain b when launching outlook in domain a until we can fully migrate all the network components to the new domain.
0
 
TacoFlavoredKissesAuthor Commented:
Did not try to refund, but yet it is trying that.  Trying to object.
0

Featured Post

Veeam and MySQL: How to Perform Backup & Recovery

MySQL and the MariaDB variant are among the most used databases in Linux environments, and many critical applications support their data on them. Watch this recorded webinar to find out how Veeam Backup & Replication allows you to get consistent backups of MySQL databases.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now