Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2
Topic Last Modified: 2011-04-28
This topic explains how to deploy Microsoft Exchange 2010 in an Exchange resource forest topology. An Exchange resource forest is also called a dedicated Exchange forest. This topic assumes that you don't have an existing Exchange 2010 topology.
The following figure shows an Exchange organization with a resource forest.
Before you begin, confirm the following:
- You have the following two Active Directory forests:
- One forest contains the user accounts for your organization. In
this procedure, this forest is called the accounts
- One forest does not contain user accounts and does not yet have
Exchange installed. In this procedure, this forest is called the
Exchange forest. You will use the procedure to install
Exchange 2010 in this forest.
- One forest contains the user accounts for your organization. In this procedure, this forest is called the accounts forest.
- You have correctly configured Domain Name System (DNS) for name
resolution across forests in your organization. To check that you
have DNS configured correctly, ping each forest from the other
forest or forests in your organization. For more information about
configuring DNS, see the DNS Operations Guide.
Deploy Exchange 2010 in an Exchange resource forest topology
- From a domain controller in the Exchange forest, create a
one-way outgoing trust so that the Exchange forest trusts the
accounts forest. For detailed steps, see Create a one-way, outgoing, forest trust for both sides of
Note: Although we recommend that you create a forest trust, you can create either a forest trust or an external trust. If you create an external trust, when you create linked mailboxes in Step 3, on the Master Account page of the New Mailbox wizard, you must specify a user account that can access the domain controller in the trusted forest. You can't use the credentials with which you are currently logged on. If you create linked mailboxes by using the New-Mailbox cmdlet, you must specify a user account that can access the domain controller in the trusted forest by using the LinkedCredential parameter.
- In the Exchange forest, install Exchange 2010. Install Exchange
the same way that you would in a single forest scenario. For
detailed steps about how to install Exchange 2010, see one of the
- In the Exchange forest, for each user in the accounts forest
that will have a mailbox in the Exchange forest, create a mailbox
that is associated with an external account. For detailed steps,
see Create a