RE: [ActiveDir] ADC and Exchange 2003 with 5.5 (Maybe OT)

[Dryden, Karen]

Title: Message

We just deleted our CA for the other domains once they upgraded to W2K/3, removed their objects from AD, and then they could install ADC for themselves and create their own CAs (which will also create a Config_CA for them) between their 5.5 server and AD. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Strand, Ted Sent: Wednesday, July 28, 2004 4:12 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] ADC and Exchange 2003 with 5.5 (Maybe OT) Thank you both for the information.  I guess the follow up question I would have is that if I create a disabled account in my domain (sub domain under an empty root) for the other sites, what will happen when they migrate their NT 4 account to their own Active directory domain.  Will it cause a problem because I will have a disabled account in my name with the same email address?   Thanks   -Ted-         From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pelle, Joe Sent: Wednesday, July 28, 2004 3:51 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] ADC and Exchange 2003 with 5.5 (Maybe OT) We are going through the same thing now (very similar infrastructure) and Karen is correct.  To confirm, MS even suggested that it is a best practice to create one CA for each site.    Joe Pelle Infrastructure Architect Information Technology Valassis / IT 19975 Victor Parkway Livonia, MI 48152 Tel 734.591.7324  Fax 734.632.6151 [EMAIL PROTECTED] http://www.valassis.com/   This message may have included proprietary or protected information.  This message and the information contained herein are not to be further communicated without my express written consent.   From: Dryden, Karen [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 28, 2004 1:55 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] ADC and Exchange 2003 with 5.5 (Maybe OT)   You need to create a CA for each site and you can create them in your domain if the other domains haven't upgraded to a W2K or W2K3 domain yet.  You should have it create disabled accounts and then when they or you are ready to migrate, you can run ADMT to migrate the users over to W2K/3 and then run adclean to merge the mailboxes with the AD objects. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Strand, Ted Sent: Wednesday, July 28, 2004 1:47 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] ADC and Exchange 2003 with 5.5 (Maybe OT) We run multiple exchange 5.5 sites all with separate NT4 domains.  As our site (and domain) was the first to complete the AD 2003 migration (all of us will be separate domains under an empty root), we are now ready to upgrade to Exchange 2003.  I have created the connector Agreement (in the test lab) for my site and domain, but the Global address list for mailboxes on the new server (mixed mode in my local 5.5 site) doesn't show the addresses in the other sites.  It looks like I need to create a CA that includes the other 5.5 sites.  I am not sure if this is correct, and if it is, what is best practice?  Do I create one CA and include all of the other sites, or do I make a CA for each site (20+).  What effect will this have on the other sites when they are ready to migrate. Should I configure the other CA's to create disabled accounts, or create contact. I have searched through quite a bit of information but was not able to get clear answers.  Any help would be greatly appreciated. Thanks -Ted-