I am in the process of deploying a Front End Back End Exchange 2003 solution. I am building the Front End currently. Does the Front End Server need to be a Domain Member?? Does it need to be a Domain Controller? if there was a way that it did not have to be, that would be a preference. The issue is the addressing in our DMZ. I am not sure if I can make a server with the disparate IP address range of our DMZ a Domain member....
- Not only does the Front-End need to be a domain member, it needs to be an Exchange server as well. Cannot install Exchange on a server that's not a member of a Domain. Exchange requires Active Directory. - Does not need to be a Domain Controller (DC). In fact, it is recommended to not install Exchange on DCs. - As a general rule, you should not place DCs from domains in internal ("production") Forests in DMZs - It is also not recommended to place Front-Ends in DMZs. - Should you really want to place an Exchange server in the DMZ: Front-End and Back-End Server Topology Guide | Configuring Firewalls | Configuring an Intranet Firewall http://www.microsoft.com/technet/prodtechnol/exchange/guides/E2k3FrontBack/f9733398-a21e-4b40-8601-cfb452da82ad.mspx -- Bharat Suneja MCSE, MCT www.zenprise.com blog: www.suneja.com/blog ----------------------------------------- "Kev" wrote in message news:747DEA98-60EE-4A58-B12D-37314C58741E@microsoft.com... >I am in the process of deploying a Front End Back End Exchange 2003 >solution. > I am building the Front End currently. > Does the Front End Server need to be a Domain Member?? Does it need to be > a > Domain Controller? if there was a way that it did not have to be, that > would > be a preference. > > The issue is the addressing in our DMZ. I am not sure if I can make a > server with the disparate IP address range of our DMZ a Domain member....
In addition, since it is not a recommendation to put a trusted domain member in a semi or untrusted network such as a DMZ, Microsoft gives an option: ISA server. You'll see a lot of information around usage of ISA Server to publish Exchange FE servers. Al "Bharat Suneja" wrote in message news:u7p84sVVGHA.4452@TK2MSFTNGP12.phx.gbl... >- Not only does the Front-End need to be a domain member, it needs to be an >Exchange server as well. Cannot install Exchange on a server that's not a >member of a Domain. Exchange requires Active Directory. > - Does not need to be a Domain Controller (DC). In fact, it is recommended > to not install Exchange on DCs. > - As a general rule, you should not place DCs from domains in internal > ("production") Forests in DMZs > - It is also not recommended to place Front-Ends in DMZs. > - Should you really want to place an Exchange server in the DMZ: > Front-End and Back-End Server Topology Guide | Configuring Firewalls | > Configuring an Intranet Firewall > http://www.microsoft.com/technet/prodtechnol/exchange/guides/E2k3FrontBack/f9733398-a21e-4b40-8601-cfb452da82ad.mspx > > -- > Bharat Suneja > MCSE, MCT > www.zenprise.com > blog: www.suneja.com/blog > ----------------------------------------- > > > "Kev" wrote in message > news:747DEA98-60EE-4A58-B12D-37314C58741E@microsoft.com... >>I am in the process of deploying a Front End Back End Exchange 2003 >>solution. >> I am building the Front End currently. >> Does the Front End Server need to be a Domain Member?? Does it need to be >> a >> Domain Controller? if there was a way that it did not have to be, that >> would >> be a preference. >> >> The issue is the addressing in our DMZ. I am not sure if I can make a >> server with the disparate IP address range of our DMZ a Domain member.... > >
