I'm a bit confused about this group in a parent child domain setting. I have a parent domain with an exchange server and a child domain which I hope will eventually be able to host mail enabled users. I've run domain prep in the child domain and so I now have the following 2 groups in both child and parent : Exchange Enterprise Servers Exchange Domain Servers So, my question is do I need to add the exchange server computer object to the exchange domain servers group in the child domain? Do I also have to add the exchange domain servers group from the child to the exchange enterprise servers group on the parent? Or are the 2 child groups redundant as I'm not actually installing an exchange server in the child domain? f

On Tue, 3 Aug 2010 09:34:44 +0000, greenboots wrote: >I'm a bit confused about this group in a parent child domain setting. > >I have a parent domain with an exchange server and a child domain which I hope will eventually be able to host mail enabled users. > >I've run domain prep in the child domain and so I now have the following 2 groups in both child and parent : > >Exchange Enterprise Servers > >Exchange Domain Servers > >So, my question is do I need to add the exchange server computer object to the exchange domain servers group in the child domain? Do I also have to add the exchange domain servers group from the child to the exchange enterprise servers group on the parent? > >Or are the 2 child groups redundant as I'm not actually installing an exchange server in the child domain? Way back when, it wasn't possible to have a security group with a universal scope in a mixed-mode AD. That may still be the case today, but I haven't checked. To get around that limitation there's an Enterprise and Domain group in each domain that's been prepped. The domain group contains just the Exchange servers from the domain and the Enterprise group has all the Domain groups as members. You shouldn't have to add anything to those groups. They're populated when you add Exchange servers to the organization. If ou have no Exchange servers in the child domain then the Domain group will be empty. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

ok, so the exchange enterprise group in both domains should contain both exchange domain groups?

On Wed, 4 Aug 2010 08:31:07 +0000, greenboots wrote: >ok, so the exchange enterprise group in both domains should contain both exchange domain groups? Yes. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP