Unity Unified in multiple domains

[m.graham]

Exchange 2K and Unity 4.0.3

We have a forest with three domains, all user sit in the first child domain and all servers, etc sit in the second. Is it possible to put the Unity server in the second child domain and still administer the users from the first. If so any ideas on what is required for this? If not where is the best place to site the Unity server?

Cheers,

[kechambe]

As long as they are all in the same forest it will work fine. The permissions wizard will help you to setup permissions correctly and there really aren't any extra challenges when you run two or more domains.

Thanks,

Keith

[m.graham]

Which domain would I run the permissons wizard in then and in which domain would I extend the AD Schema?

Cheers,

[lindborg · Accepted solution]

the schema is extended at the GC - it applies to all domains.

When you run PW it will let you pick domains/containers to select adding rights for importing users from - you don't need to run it in each or a particular domain - you run it where you'll be installing Unity against the accounts you'll be using for directory and message store access.

[kechambe]

Technically the schema is extended on the domain controller running the Schema Master FSMO role. The first DC in the forest owns this role unless you have moved the role manually using ntdsutil.exe. All domains in the forest share a single common schema.

Virtually all of the Unity schema changes have isMemberOfPartialAttributeSet set to true which causes AD to replicate them to the GC.

Thanks,

Keith