RE: [ActiveDir] exchange 5.5, active directory and ADC

[Ayers, Diane]

I'll second Nick's comment to test your implementation in a lab setup first before doing it live.  There are some subtle (and not so subtle) things that you can do to hose your production setup.  The first lab run we did hosed our lab but we learned.  That's what labs are for....   Diane From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nicolas Blank Sent: Tuesday, June 01, 2004 3:11 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] exchange 5.5, active directory and ADC Correct, suggest since you haven’t worked with the ADC before that you lab/vmware this at least once, and document your process before trying this in production. This way you’ll have something to work with without being tempted to tick any options you haven’t seen work in the lab before.   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chaudhary, Amit Sent: 01 June 2004 11:49 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] exchange 5.5, active directory and ADC   Sorry   But want to make sure I’m understanding you here. You suggesting set schedule to never, until the ADC is inplace and working ok? Then moving it to a schedule? We don’t plan to completely shut down the old exchange server for a few weeks at least.   Anything else I should be aware off adding the ADC in terms of this migration to Exchange 2003   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nicolas Blank Sent: 01 June 2004 10:39 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] exchange 5.5, active directory and ADC   Yip, the AD container/OU is selectable whilst creating the recipient agreement connection. Suggest the first thing you configure is setting your schedule to “NEVER”, and finish your other bits and pieces.   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chaudhary, Amit Sent: 01 June 2004 11:21 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] exchange 5.5, active directory and ADC   Nick   Cheers, can you configure ADC to create any accounts it needs to in a separate container in the AD?   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nicolas Blank Sent: 01 June 2004 10:04 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] exchange 5.5, active directory and ADC   Amit, Depending on how the accounts were created, it is possible to use the ADC to match accounts already existing in AD. If no match is found for a 5.5 mailbox, a duplicate account will be created in AD.  The default matching rule will match the 5.5 associated-NT-Account field to the AD account’s sid or sidHistory attribute.  You may extend the matching rules in the ADC so that you can match RDN to CN or a mail alias to samaccountname ifyou have a match between those. I strongly suggest you read the article below:   Understanding and Deploying Exchange 2000 Active Directory Connector http://www.microsoft.com/downloads/details.aspx?FamilyID=c763b584-c511-4687-b27f-a13a8f82d4c8&displaylang=en   If you configure your ADC incorrectly, you may only have duplicate accounts, but at worst case you might lose mail.     -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chaudhary, Amit Sent: 01 June 2004 10:13 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] exchange 5.5, active directory and ADC   Hi   This maybe a bit of topic but I was hoping to get some advice from the list.   I have a Windows 2000 active directory environment, one of my Windows 2000 servers is running exchange 5.5 (not a DC). We have been considering moving to exchange 2003, the migration method was to join exchange 2003 to the existing site, move the mailboxes and then bring down the old server. The problem is that I have come across the Active Directory Connector and I wanted to get some more information on this, as I have been told it has not been installed on my site. I.e. the 5.5 directory is not updating the active directory and vice versa.   If we were to install the Active Directory Connector, would exchange create new accounts in my AD for all the mailboxes I have in my mail system, or will it see that active directory accounts are already created? The AD accounts are created as firstname lastname, but the display names for our email accounts are lastname, firstname. What will be the overall affect on my AD of installing this connector and enabling bi-directional communication?   Regards   Amit