
Signature
Chris Scharff
MessageOne
http://www.messageone.com
-- ROT13 for valid SMTP address --
Hi Chris,
Your help is greatly recommended.....I was also
thinking...if I establish a two way trust... with the old
Nt4.0 domain and the new W2K3 domain, then if I join
users to the new w2k3 domain, how would I prevent a
double login if they are using the old mail (exchange5.5)
from the old domain when they are now logging onto the
new domain? Would trusts prevent this....because if I can
migrate everyone to the new domain first using the old
domain's e-mail then I can script the outlook profile so
that the swap over happens all at once...
Once again your help is appreciated.
Or can I use the new Exchange while logging onto the old
domain. without authenticating twice?
Thanking You
Elvis
>-----Original Message-----
>In the last exciting episode, "Elvis"
[quoted text clipped - 17 lines]
>Look at setting up an InterOrg CA to replicate the users between
>servers perhaps.
Chris Scharff [MVP] - 21 Jun 2004 17:52 GMT
In the last exciting episode, "Elvis"
<anonymous@discussions.microsoft.com> wrote:
>Hi Chris,
>
[quoted text clipped - 11 lines]
>Or can I use the new Exchange while logging onto the old
>domain. without authenticating twice?
Yeah, you can do the latter (log into the old domain, and access
Exchange in the new domain but only have to authenticate once).
There's a whitepaper on Exchange resource forests which I believe
describes the process. You need the Exchange forest to trust the old
domain and give the old NT accounts permissions on the new
accounts/mailboxes. They need the following set... full mailbox,
associated external account and one other permission I can't seem to
remember off of the top of my head. Then you could change everyone's
profile at once, but their domain membership and the domain membership
of their computer account will not be an issue.

Signature
Chris Scharff
MessageOne
http://www.messageone.com
-- ROT13 for valid SMTP address --