AD Considerations for Exchange 2007

If you want a smooth deployment of Microsoft Exchange Server 2007, you'll need to make sure your Active Directory (AD) is properly designed and implemented. Here are some things you'll want to check.

Domain Controllers The schema master and all the Global Catalog (GC) servers within the forest where Exchange 2007 will be installed must be running Windows Server 2003 SP1 or later. All domains within the forest must have a functional level of Windows 2000 native or higher. Any site that will contain an Exchange server running the Mailbox, Hub Transport, or Client Access server role must contain at least one GC server. If possible, your domain controllers (DCs) should run a 64-bit Windows OS.

Global Catalog Servers You need to have one GC server core for every eight Exchange 2007 cores; your GC servers must be running a 64-bit Windows OS, and each server must have enough physical memory installed so that it can cache the entire AD database in RAM.

AD Site Topology Exchange 2007 routing is based on AD site topology. Placing Exchange 2007 in a dedicated site could negatively affect mail flow, particularly in organizations with five or more AD sites.

DNS Requirements The Mailbox, Client Access, Hub Transport, and Unified Messaging server roles must be domain members and must have their IP addresses registered with the organization's internal DNS server. The Client Access server needs to be accessible from outside the organization; for security, configure the firewall to use port forwarding to send HTTP traffic to the Client Access server. The Edge Transport server runs a hardened Exchange implementation and isn't a member of a domain.

Discuss this Article 4

bkwin
on Sep 21, 2007
I pulled this sidebar together from Brien's article, "Designing Active Directory for Exchange Server 2007," InstantDoc ID 96536. In the main article, what Brien says is that according to Microsoft's recommendation, for the 8:1 ratio of Exchange cores to GC cores to be valid, you need a 64-bit Windows OS and you need enough memory to cache the entire AD database in RAM. Unfortunately, that's not the way it comes across in the sidebar. Sorry for the confusion, and I hope this clears things up a bit. Brian Winstead Assistant Editor bwinstead@windowsitpro.com
Sandy
on Sep 17, 2007
I have to echo my concern about the "64-bit only" GC servers.......it appears that it's a nice to have only.
perezjonestsisah@yahoo.com (not verified)
on Sep 15, 2007
It has been useful.
hitchcock4
on Sep 13, 2007
You wrote that "your GC servers must be running a 64-bit Windows OS". This is not true - the only check whether it is 64-bit is to *recommend* that you go to 64-bit. Nice article, though

Please or Register to post comments.

IT/Dev Connections

Las Vegas
September 30th - October 4th

Paul ThurottYou'll have the opportunity to experience:
• The Microsoft
Technology Roadmap
• Office 365 Implementation
• Hyper-V Optimizing
• Windows 8 Deployment
and much more!

Come See Paul Thurrott & Rod Trent in Person!

Early Registration Now Open

Upcoming Training

Mastering SharePoint 2013: Succeeding, Not Just Surviving

Building on the success of the “Mastering SharePoint 2010” seminars, the presenters have updated the content to cover the latest and greatest SharePoint product: SharePoint 2013. While SharePoint 2013 is relatively new on the marketplace, the presenters have been working with SharePoint 2013 for well over a year, and have implemented it with a number of clients in production environments.

Register Now

Current Issue

May 2013 - The NameTranslate object is useful when you need to translate Active Directory object names between different formats, but it's awkward to use from PowerShell. Here's a PowerShell script that eliminates the awkwardness.

CURRENT ISSUE / ARCHIVE / SUBSCRIBE

Windows Forums

Get answers to questions, share tips, and engage with the Windows Community in our Forums.