installing exchange 2007 schema extensions to a Child domain
Hello,
Some time ago, we implemented Echange 2007 in our environment. We ran the appropriate Setup /PrepareXXX commands, but only ran them against the top level domain, as the other child domains were not ready to move to Echange 2007. We now have a child domain
whose users need to take advantage of the Exchange 2007 server in the top level domain. We do not intend on installing an Exchange 2007 server in this domain, just allowing the child domaiusers to have mailboxes on our existing Exchange 2007 server or
to move their existing mailboxes off of the Exchange 2003 server that exists in that child domain.
Do I need to run any sort of domain preparation in the child domain, if my goal is simply to allow these child domain users to have mailboxes on the Exchange 2007 Server in the top level domain? My plan was to just run "setup /pd" from a machine
within the child domain, but maybe I don't actually need to do this.
If I do indeed need to prepare the child domain, will setup /pd be sufficient, or will I need to run through the other setup /Preparexxx commands on the child domain as well.
Thanks
Christiaan.
February 9th, 2011 6:45pm
Hi
If you would have ran setup /PrepareAD while the preparation of Exchange 2007 Installation, no need to prepare the other domain.
If you have ran Setup /PrepareDomain then please go-ahead to run setup /pd on Child domain as well...Ravi | Messaging Specialist. This posting is provided "AS IS" with no warranties, and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
February 9th, 2011 7:16pm
we are currently at Exchange 2007 sp2. do I need to use the sp2 setup.exe to extend this child domain, or the original install disk?
February 9th, 2011 7:32pm
Please use Exchange 2007 sp2 CD..
Note As I already informed you
If you would have ran setup /PrepareAD while the preparation of Exchange 2007 Installation, no need to prepare the other domain.
If you have ran Setup /PD then please go-ahead to run setup /pd on Child domain as well..Ravi | Messaging Specialist. This posting is provided "AS IS" with no warranties, and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
February 9th, 2011 7:59pm
ok,
we did run setup /pd and not setup /ad previously, so we need to run it on the child domain.
This child domain does not have any 64-bit domian controllers or servers. can I run setup /pd from a 64-bit desktop in the child domain running either windows vista or windows 7?
February 9th, 2011 11:40pm
One more question.
An Exchange 2003 Server exists in this child domain. I wasn't sure whether or not we already ran setup /preparelegacyechangepermissions against this domain so I went through following verification as indicated in the White paper for preparing
active directory for exchange 2007
http://technet.microsoft.com/en-us/library/bb288907(EXCHG.80).aspx\
Launch Ldp.exe. Click Connection, and then click Connect (leave server blank). Click
OK. Click Connection, and then click Bind (leave credentials blank). Click
OK. Click View, and then click Tree. Enter the fully qualified domain name (FQDN) (for example, DC=northwindtraders,DC=co,DC=uk). Click
OK. Right-click the domain (for example, northwindtraders.co.uk), click Advanced, and then click
Security Descriptor. Click OK.
The GUID for the Exchange-Information extended right is 1F298A89-DE98-47b8-B5CD-572AD53D267E.
Scroll through the results pane and look for Object Ace Type: Unknown with this GUID.
the results were as follows:
Ace[25]
Ace Type: 0x5 - ACCESS_ALLOWED_OBJECT_ACE_TYPE
Ace Size: 40 bytes
Ace Flags: 0x2
CONTAINER_INHERIT_ACE
Object Ace Mask: 0x00000010
ACTRL_DS_READ_PROP
Object Ace Flags: 0x1
ACE_OBJECT_TYPE_PRESENT
Object Ace Type: Exchange Information
- 1f298a89-de98-47b8-b5cd-572ad53d267e
Object Ace Sid: NT AUTHORITY\Authenticated Users S-1-5-11
The Object ACE Type is not "unknown", it is "Exchange Information". does this mean that setup /AD has already been run for this child domain?
Free Windows Admin Tool Kit Click here and download it now
February 10th, 2011 1:15am
Hi,
Yes you are right, but please go-through the below link also to the see the Active Directory Schema Changes:
http://technet.microsoft.com/en-us/library/aa997467(EXCHG.80).aspxRavi | Messaging Specialist. This posting is provided "AS IS" with no warranties, and confers no rights.
February 10th, 2011 7:37pm