Clarify Exchange 2010 Resource Forest Topology

Posted on 2011-05-12
Medium Priority
Last Modified: 2012-05-11
Objective: We want to deploy a single Exchange 2010 Server and have it support the users in its "home" domain and forest as well as users in a separate domain and forest.

Our scenario:  We manage 2 domains that are each in their own forest.  Neither one currently has an Exchange server.  Both are 2003 AD functional level.  Both domains have user accounts.  DomainA is located in ForestA, and DomainB is located in ForestB.  A domain trust between DomainA and DomainB has been configured and is working properly.  We want to deploy Exchange 2010 to DomainA for DomainA users and allow DomainB users to use its services at the same time.

The reason I'm having trouble being certain whether or not DomainA can have user accounts and still be able to deploy Exchange 2010 to DomainA in a Resource Forest Topology is the MS article's description of an Exchange Resource Topology (found at http://technet.microsoft.com/en-us/library/bb124734.aspx):

Resource Forest

A resource forest topology is one with an Exchange forest and one or more user accounts forests.
That means both ForestA and ForestB in our case are User Accounts Forests.
Here is an overview of what you need to do to deploy Exchange 2010 in a topology with a resource forest:

1.You must have a forest with Exchange installed. In the Exchange forest, you must have disabled the user accounts that have Exchange mailboxes.
So all the users in our DomainA would have to be disabled and they wouldn't be able to log in anymore?  We can't do that.
2.You must have at least one forest that contains user accounts. This forest should not have Exchange installed.
So we can't deploy Exchange 2010 to DomainA if we want to simultaneously support DomainB with it?
3.Then, you must associate the disabled user accounts in the Exchange forest with the user accounts in the accounts forest.
When deploying Exchange to a domain with user accounts, aren't the accounts automatically associated with their respective mailboxes?

Obviously, the article was of no use to me in trying to answer our question:

Can DomainA in ForestA also be the Exchange Resource Forest for iteself as well as being the Exchange Resource Forest for DomainB in ForestB?  (DomainB must remain in ForestB).

/reaches for Aspirin...
Question by:UncleN00b
LVL 13

Accepted Solution

George Sas earned 2000 total points
ID: 35752391
The topology you want to implement will use Linked Mailboxes.

The exchange you are going to deploy will be able to support both forests, this is not a problem.

1. MS says you must disable the users that have the exchange mailboxes LINKED to the other forest, and yes I think they should have been a bit more clear here.
See the topology here : http://technet.microsoft.com/en-us/library/aa998031.aspx

2. If you want to deploy exchange in both domains, then why having all this trouble of using the cross forest setup ? Then it makes no sense to have a cross forest setup.

3. When you create a new user this will not automatically have a mailbox attached to his account so not all the accounts will have a mailbox associated to their account by default.

To answer your final question : You can install Exchange in Forest A and this exchange organisation will be able to support the local users as well as the users from DomainB.
You can not have a mailbox running on the server without a user account associated with it. Therefore you must create a new user in Domain A with a mailbox attached and then disable THIS user if you want to link it with an user in Domain B.

I hope this clarifies a bit better this scenario.

Author Comment

ID: 35753961
Thank you GeoSs.

On your answer #2, we never intended to have multple Exchange installations.  That is the reason to get clarification on this.  I apologize if something I said suggested that.  I was not completely sure that we didn't need to create a ForestC to be the Exchange Forest to get this to work which, as Microsoft has worded it, could possibly imply that need.  Thank goodness we don't need a 3rd forest.

Thank you again for the information!

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Steps to fix “Unable to mount database. (hr=0x80004005, ec=1108)”.
There can be many situations demanding the conversion of Outlook OST files to PST format and as such, there is no shortage of automated tools to perform this conversion. However, what makes Stellar OST to PST converter stand above the rest? Let us e…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
This video discusses moving either the default database or any database to a new volume.
Suggested Courses

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question