RE: multiple domains and login names

  • From: Tony Givargis <tgivargis@xxxxxxxxx>
  • To: "\[ExchangeList\]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Mon, 10 Nov 2003 09:15:16 -0800 (PST)

We fixed our 'mistake.'  now, we're left with 2 problems:
 
1.  when we try to connect using our UPN names, we get no success.  But our 
pre-win2k names work.  
2.  we still cannot get the right query for the GAL to work.  is there an 
example somewhere?

"Mulnick, Al" <Al.Mulnick@xxxxxxxxxx> wrote:
http://www.MSExchange.org/
What have you changed?


---------------------------------
From: Tony Givargis [mailto:tgivargis@xxxxxxxxx] 
Sent: Sunday, November 09, 2003 2:33 PM
To: [ExchangeList]
Subject: [exchangelist] RE: multiple domains and login names



http://www.MSExchange.org/ Thanks for the all the help!!  This is turning into 
a nightmare.  Now, when I try to connect to my server via the user@domain way, 
i get a 8004011d error from outlook (outlook 2003, exchange 2003, connecting 
RPC/HTTPS).  But, the pre-win2k way works.  HELP!

"Mulnick, Al" <Al.Mulnick@xxxxxxxxxx> wrote: http://www.MSExchange.org/
Fairly similar.  Did you follow this step?
Since Dogfood employees might want to log in using their own domain name, a UPN 
suffix can be added to the dogfood Organizational unit by using the ADSIEdit 
tool.
 
If you did, then the user logs in using the user@xxxxxxxxxxx UPN.  They won't 
be able to use the Pre-Windows 2000 name (samAccountName) as their login name 
as it would be ambiguous and they wouldn't have permissions where required.  
UPN should solve this nicely I would think.
 
 
Al


---------------------------------
From: Tony Givargis [mailto:tgivargis@xxxxxxxxx] 
Sent: Friday, November 07, 2003 12:31 PM
To: [ExchangeList]
Subject: [exchangelist] RE: multiple domains and login names



http://www.MSExchange.org/ no.  we followed this tutorial:
http://www.msexchange.org/tutorials/Shared_Hosting_Exchange_2003_Part1.html


"Mulnick, Al" <Al.Mulnick@xxxxxxxxxx> wrote:
http://www.MSExchange.org/
Help me out here Tony.  Did you follow something like this in the hosting? 
http://www.microsoft.com/serviceproviders/whitepapers/hvh_ad_deploy.asp
 
The pre-Windows 2000 login name is not what should be focused on here, but 
rather the UPN name.  Is that not what you're doing?  Is there a problem still 
doing it this way for you?
 
 
Al


---------------------------------
From: Tony Givargis [mailto:tgivargis@xxxxxxxxx] 
Sent: Thursday, November 06, 2003 10:14 PM
To: [ExchangeList]
Subject: [exchangelist] RE: multiple domains and login names



http://www.MSExchange.org/ I have a twist to that question.  How do you add the 
same user logon to multiple virtual domains?  Specifically the User logon name 
(pre-Windows 2000) can't be the same since the domain prefix is grayed out.  
Any way to change it to allow the same user logon name to be added to multiple 
virtual domains?  We're running Exchange 2003 on a Windows 2003 server.

"Mulnick, Al" <Al.Mulnick@xxxxxxxxxx> wrote: http://www.MSExchange.org/

As a login name, this is handled at the Active Directory level. Since
webmaster@xxxxxxx is representing a sID, logging into a resource in another
domain via local domain credentials is handled by the domain trusts. 

In practice, if your accounts is in abc.com domain which has a two-way kerb
trust with exchange_domain.com then you acl the mailbox called webmaster
with the sID represented by webmaster@xxxxxxxx At this point,
webmaster@xxxxxxx does not have access to the webmaster@xxxxxxx mailbox,
right? Repeat for the other domains as required. That's access. Addressing
to the mailbox is straightforward with webmaster@xxxxxxx getting a mailbox
(represented likely by a user object or a disabled user object in Active
Directory), webmaster@xxxxxxx getting a mailbox, etc.

If you're hosting, you've hopefully already read the docs describing
building the GAL so that they can't see each other in the address list. 


Is that what you're after?

Al

-----Original Message-----
From: A. Michael Salim [mailto:msalim@xxxxxxxxxxxx] 
Sent: Thursday, November 06, 2003 12:38 AM
To: [ExchangeList]
Subject: [exchangelist] multiple domains and login names

http://www.MSExchange.org/

Hi,

For those who are hosting an Exchange 2000 or 2003 server with multiple
domain names, I have a question: Do user login names have to be unique
across domains? If so, how would one handle several users (each with their
own individual domain name) who want the same "login name" e.g.

webmaster@xxxxxxx
webmaster@xxxxxxx
webmaster@xxxxxxx

Note that these are truly independent users, unrelated to, and unaware of,
one another, different companies/organizations, and *MUST* remin independent
of each other.

TIA!
Mike.


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------


---------------------------------
Do you Yahoo!?
Protect your identity with Yahoo! Mail AddressGuard 
------------------------------------------------------ List Archives: 
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: 
http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: 
http://www.msexchange.org/pages/larticle.asp?type=FAQ 
------------------------------------------------------ Other Internet Software 
Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com 
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security 
Resource Site: http://www.windowsecurity.com/ Network Security Library: 
http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com 
------------------------------------------------------ 
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------ 

---------------------------------
Do you Yahoo!?
Protect your identity with Yahoo! Mail AddressGuard 
------------------------------------------------------ List Archives: 
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: 
http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: 
http://www.msexchange.org/pages/larticle.asp?type=FAQ 
------------------------------------------------------ Other Internet Software 
Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com 
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security 
Resource Site: http://www.windowsecurity.com/ Network Security Library: 
http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com 
------------------------------------------------------ 
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------ 


---------------------------------
Do you Yahoo!?
Protect your identity with Yahoo! Mail AddressGuard 
------------------------------------------------------ List Archives: 
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: 
http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: 
http://www.msexchange.org/pages/larticle.asp?type=FAQ 
------------------------------------------------------ Other Internet Software 
Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com 
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security 
Resource Site: http://www.windowsecurity.com/ Network Security Library: 
http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com 
------------------------------------------------------ 
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------ 

---------------------------------
Do you Yahoo!?
Protect your identity with Yahoo! Mail AddressGuard

Other related posts: