Solved

2 Domains One Exchange Server? Or use AD Federation Server?

Posted on 2012-03-12
6
384 Views
Last Modified: 2012-06-04
Overview:
Blue: Mother Company blue.com
Red: Subsidiary red.com  (IT Services Company)

What Red needs from Blue:
Red employees need access to Blue's servers and network resources.
Red need their own email id such as User@red.com
Ideally Red could have its own domain, and therefore its own security policies which may conflict with Blues policies

Why?:
In a move to provide Red its own foundation and corporate Identity Red has invested in HR Dynamics (HR Payroll) and its required Infrastructure. (SAN + Virtualization etc)

How:
Is it possible to configure Blues Exchange servers (where currently all red employees exist as red_employee@blue.com) to accept mail for red_employee@red.com & red_employee@blue.com?

Should we look into ADFS? (whats needed in this case is access to servers via RDC, no webapps as far as I know at this time, somehow still list red@red.com in Blue exchange directory.)

Its complex I know but essentially all red employees at this time still work for blue mostly. However the plan within the next 2 years or so is for Blue to start working on external company contracts in terms of IT Services.
0
Comment
Question by:Kizm
6 Comments
 
LVL 14

Expert Comment

by:brendanmeyer
Comment Utility
yes.. you need to add the domain to the accepted domains
and then add the email addresses to the users for @red.com

have a look at http://www.petri.co.il/configure-exchange-2007-recieve-email-other-domains.htm for more details
0
 

Author Comment

by:Kizm
Comment Utility
What about ADFS would it be worth the trouble? Do you know of any organizations that have used it in a scenario similar to ours?
0
 
LVL 14

Expert Comment

by:brendanmeyer
Comment Utility
Naa sorry, I haven't done anything with ADFS before.
0
What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

 
LVL 17

Expert Comment

by:Gaurav Singh
Comment Utility
0
 
LVL 38

Accepted Solution

by:
Adam Brown earned 500 total points
Comment Utility
ADFS will not help you with Exchange. It's designed to provide Single Sign On for Web based applications only and can't be used to federate anything other than web based traffic. Exchange has a type of federation, but it's completely different from ADFS. Exchange Federation relies on using microsoft's federation gateway as an intermediary trust. http://technet.microsoft.com/en-us/library/dd335047.aspx has a lot of information on it.

There are a lot of different solutions for the scenario you outline. Each one depends on budget constraints and other things, though. Probably the simplest is to hold the Exchange infrastructure in the Blue forest and set up Linked Mailboxes for the users in the Red domain. http://technet.microsoft.com/en-us/library/dd298099.aspx should give you some good info on multiple forest design.
0
 

Author Comment

by:Kizm
Comment Utility
Sorry for the late reply, thank you all for your answers. I will look into the info you provided.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This video discusses moving either the default database or any database to a new volume.

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now