RE: [ActiveDir] Need Help on a Decision

[Gil Kirkpatrick]

Title: Message

Jennifer,

 

The decision depends entirely on what you want to accomplish with resepect to security, autonomy, and delegation of administration. The best reference is Design Considerations for "Delegation of Administration in Active Directory" at http://www.microsoft.com/technet/treeview/default.asp?url="">.

 

You should read the doc and then evaluate your organization's requirements before you make a decision... its often difficult to "unmake" the decision later.

 

HTH,

 

-gil

-----Original Message-----
From: Jennifer Fountain [mailto:[EMAIL PROTECTED]
Sent: Friday, April 04, 2003 10:11 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Need Help on a Decision

I am in a bit of a quandary about a decision I have to make and need some advice from some local (or not so local) experts.  We are located in the US and have a branch in sweden (recent purchase).  They already have established a domain and exchange server.  We are trying to decide should we change their entire enviroment and install a DC from our domain and reconfigure (basically export/import mailboxes) reinstalll their exchange server to be part of our org OR do a trust relationship and be done with it (I believe you can share GALs in exchange)

What (in your opinion) is the best option here?  should we take control or establish a trust? which is more secure? 

IMO, I think we should establish the trust - easier on them, us and IMO more secure because I do not have to give their users domain users access - or am i wrong?

Thanks for any input!
Jenn