RE: [ActiveDir] the ADC (yeah, baby!) - Oh Behave!

[Burns, Clyde]

Title: the ADC (yeah, baby!)

Interesting scenario you have there. I assume your two exchange servers are in the same site from Exchange 5.5 perspective? If you have no users on Exchange 2000 yet here's what I would try. 1. Disable/delete the CA's in your ADC setup. (leave exchange 2000 out of the picture for now) 2. Migrate your user accounts from the NT4 domain to the 2000 domain by whatever means you are planning. 2a. Reassociate your Exchange 5.5 mailboxes from the NT\username to the 2000\username account. (should work across the trust, Ive set up this scenario with 2 nt4 domains with success before, excepting the caviat in 2b.) 2b. As a precaution give the 2000\domain users "log on locally" privileges on the NT4 exchange server (I've seen issues in NT4 where you had users in Domain1 and Domain2, 2 one-way trusts between them and Exchange in Dom1 where user accounts in Dom2 couldn't access their mail until they had the log on locally privilege to the exchange server in Dom1. 3. Use the ntdsnomatch software to minimize the multiple exchange email accounts to user account scenario. 4. Once you've turned your NT4 into a resource domain (no user accounts, or at least none that are accociated with Exchange mailboxes) fire up Exchange 2000 and ADC. That way you only have one directory service to worry about.   For more info with links to specific tasks take a look at the following two technet articles. (they are in Decembers Technet CD but not on M$'s web site yet.) Q300141 (I think this one covers your exact situation) Q300139 (also worth looking at)    Clyde Burns      -----Original Message----- From: Pelle, Joe [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 17, 2002 5:16 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] the ADC (yeah, baby!) - Oh Behave! We have (in a lab environment) an Exch5.5 box on an NT4.0 domain, a Win2K DC in Native Mode (nt trusts 2000 and vice versa, an Exch2000server in mixed mode, and an ADC (from the E2000 disk) with a two-way CA between the two Exch servers (5.5 and 2000).   Eventually we will migrate the NT 4 domain to AD and the 5.5 will one day go away but my question is what to do with the user accounts when migrating them from NT to 2000 and still have the 5.5 mailboxes work?   Joe Pelle Systems Administrator Information Technology Valassis / Targeted Print & Media Solutions 35955 Schoolcraft Rd.   Livonia, MI  48150 Tel 734.632.3753      Fax 734.632.6240 [EMAIL PROTECTED] http://www.valassis.com/ This message may have included proprietary or protected information.  This message and the information contained herein are not to be further communicated without my express written consent. -----Original Message----- From: Burns, Clyde [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 17, 2002 4:53 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] the ADC (yeah, baby!) - Oh Behave!   Highly highly highly recommend you go thru your exchange 5.5 user directory with NTDSNoMatch. http://support.microsoft.com/default.aspx?scid=KB;en-us;q274173 If you get a one to one mapping between exch5.5 accounts and AD users it makes life alot easier.   Of course Im making some assumptions about your setup. (like the fact you have exchange 5.5 in your AD mixed or native mode forest) Give us some more details about your current setup if thats an incorrect assumption.   Clyde Burns -----Original Message----- From: Pelle, Joe [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 17, 2002 4:32 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] the ADC (yeah, baby!) When creating the ADC to work with E5.5 and AD, what do you elect to do with the accounts the ADC creates?  We're using a migration tool that will migrate users, and having the ADC create disabled users or contacts or enabled users seems like all bad choices (since the migration tool will create these same users WITH sID HISTORY)... All thoughts and suggestions are welcome!  Thanks! Joe