|
|
|
date: Wed, 22 Feb 2006 11:58:33 -0500,
group: microsoft.public.exchange2000.active.directory.integration
back
Re: Multiple SMTP Domains
>I have configured multiple smtp domains on exchange (2003, sp2, fe, be
>enviorment). i have configured another virutal http server with the host
>header of this domain so that it seperates the users from the other domain
>resources, ie. public folder and mailbox stores. however they can only logon
>when they use the smtp domain in the address..
IMO, you should be using a second virtual directory of the 'Mailboxes
for an SMTP domain' type, not a full virtual server. Running a second
VS on the same box with a different host header isn't necessary, and
just creates more management headaches.
From a security standpoint, you're not sealing them off from the
public store; as long as they are permissioned for it, they can still
log in using the default /exchange/public. Likewise for the mailbox
store. If they have permissions to a mailbox on a store, they can hit
it. If they can't, they won't be able to log in. Unless you're using
source IP address restrictions as well, there's nothing but cosmetic
"segregation" going on.
As Lee points out, allowing them to log in using the other UPN
requires changes elsewhere. But, again, it's just cosmetic/branding,
since it is probable that you are ensuring username (LHS) uniqueness
across all domains, and it's possible to have the users not have to
enter a domain at all.
--Sandy
date: Wed, 22 Feb 2006 20:49:03 -0500
author: Sanford Whiteman
|
|