RE: [ActiveDir] DeForestation

[joe]

Title: RE: [ActiveDir] DeForestation

Nope, not doubting, I haven't been following most of the threads sorry, trying to catch up right now. I mentioned that it might be sticky but doable. Sorry if I seem to say other.     joe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Friday, July 16, 2004 5:18 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] DeForestation i thought using ms Idenity intergration feature pack and the PF sync tool as well as the owa solution proposed earlier and win2k3 transtive trusts between 2 forests and dns conditional forwarding, this would be very possible.     Do you doubt that it's possible now?  If so, why? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Friday, July 16, 2004 4:57 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] DeForestation Now that is an interesting configuration. I am guessing the secretary likes being in a different physical location than the boss, that can be handy.   I would expect with trusts most of that is solved... The sticky point would be the Exchange integration though I expect it is doable as well.     joe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Wednesday, July 14, 2004 2:55 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] DeForestation no, the secretary is a member of our domain/forest. the manager(actually, ceo) is a member of the source domain/forest and will stay there. The ceo is in a diff. geographical location as well. Essentaily, these are 2 equal companies which have merged but alas for political reasons and otherwise(such as not getting enterprise admin access), the 2 IT dept. don't see eye to eye. so my CIO is considering seriously to seperate the forest though with as little discomfort to the end users as possible. we still need to share resources(files primarily) and access to the corporate intranet site and ms content manager service and the gal,free/busy,limited mailbox access cross forest. also when some visiting manager comes to our site, he should be able to access his resources in his home forest etc. since we can't seem to share mangement of our forest we would like 2 seperate forests but still provide the same resources as 1 forest. hence, my pickle.   i thought using ms Idenity intergration feature pack and the PF sync tool as well as the owa solution proposed earlier and win2k3 transtive trusts between 2 forests and dns conditional forwarding, this would be very possible. -----Original Message----- From: joe [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 14, 2004 1:39 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] DeForestation On the Secretary issue, move the boss and secretary at the same time together. We always treated those folks as a single entity. If you got high enough up into the chain where a single manager had multiple secretaries or assistants they all got moved in one shot. Even if it was simply moving mailboxes from one Exchange server to another. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Wednesday, July 14, 2004 11:54 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] DeForestation do you have a link to the docs?   also, if i give the secretaries access to a mailbox in another forest/org, an account and mailbox has to be created for them in the other forest and they would have to chose from a seperate outlook profile if they wanted to update that mailbox. Correct?   Also, i assume intranet sites that use ntlm auth will work in a trust relationship between 2 forests? Do the root dc's have to be at a certain functional level for the trust to be transitive among all the child domains fo 2 forests?     thanks alot! -----Original Message----- From: Mulnick, Al [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 14, 2004 11:36 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] DeForestation You might also check with Microsoft to see that they have a PFInterOrg tool that will let you synch the F/B data.  It's in the multi-forest deployment docs how it works and what's needed.   You might offer those secretaries an alternative method, such as OWA to update calendars for people.  That's user education and thought change vs. a technical issue.  You might also grant them rights on the calendar and let them open it that way.  There's a list of things you can and cannot do in multi-forest scenarios in that same document. :)     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd (NIH/CIT) Sent: Wednesday, July 14, 2004 10:28 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] DeForestation You might check with Quest.  They have an Exchange Migration tool that is supposed to be able to sync free/busy info.  You have to go ORG to ORG I think though.   Todd   From: Kern, Tom [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 13, 2004 7:01 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] DeForestation   Actually, the migration may not happen now. The sticking point is not being able to synch free/busy info bet forests. also, we have some secerataries in one forest who would need to open and update the calenders of thier managers who would be in a diff. forest. i can't see this working without disrupting the end user in someway. Finally, I'm not sure SAP or MS content management server will work cross forests.   Thanks for all your help and i promise not to repost so much again.