Deploy Exchange 2010 in an Exchange Resource Forest Topology

  • Article

Applies to: Exchange Server 2010

This topic explains how to deploy Microsoft Exchange 2010 in an Exchange resource forest topology. An Exchange resource forest is also called a dedicated Exchange forest. This topic assumes that you don't have an existing Exchange 2010 topology.

The following figure shows an Exchange organization with a resource forest.

Example of an Exchange organization with an Exchange resource forest
Complex Exchange organization with resource forest

Prerequisites

Before you begin, confirm the following:

  • You have the following two Active Directory forests:
    • One forest contains the user accounts for your organization. In this procedure, this forest is called the accounts forest.
    • One forest does not contain user accounts and does not yet have Exchange installed. In this procedure, this forest is called the Exchange forest. You will use the procedure to install Exchange 2010 in this forest.
  • You have correctly configured Domain Name System (DNS) for name resolution across forests in your organization. To check that you have DNS configured correctly, ping each forest from the other forest or forests in your organization. For more information about configuring DNS, see the DNS Operations Guide.

Deploy Exchange 2010 in an Exchange resource forest topology

  1. From a domain controller in the Exchange forest, create a one-way outgoing trust so that the Exchange forest trusts the accounts forest. For detailed steps, see Create a one-way, outgoing, forest trust for both sides of the trust.

    Note

    Although we recommend that you create a forest trust, you can create either a forest trust or an external trust. If you create an external trust, when you create linked mailboxes in Step 3, on the Master Account page of the New Mailbox wizard, you must specify a user account that can access the domain controller in the trusted forest. You can't use the credentials with which you are currently logged on. If you create linked mailboxes by using the New-Mailbox cmdlet, you must specify a user account that can access the domain controller in the trusted forest by using the LinkedCredential parameter.

  2. In the Exchange forest, install Exchange 2010. Install Exchange the same way that you would in a single forest scenario. For detailed steps about how to install Exchange 2010, see one of the following topics:

  3. In the Exchange forest, for each user in the accounts forest that will have a mailbox in the Exchange forest, create a mailbox that is associated with an external account. For detailed steps, see Create a Linked Mailbox.