locked
OCS Deployment without Forest RRS feed

  • Question

  • Hi everyone,
    I may be planning an OCS deployment soon, for a company with multiple sites, having one domaine per site, but without any Forest on top of that. Is it possible to use trusts in such a case in order to deploy OCS SE in one of the sites, and the other sites connecting to it through trusts?

    Thanks.
    Friday, July 11, 2008 9:37 AM

All replies

  • The OCS enabled uses will have to be native to a prepped-forest/domain, so trusts aren't going to do much there.  I assume costs issues or some other factor is preventing the desire to deploy a standard OCS server in each seperate forest/domain?  Since they are all different AD forest with unique (I hope!) namespaces, then that sounds like a perfect candidate for Federation.

    Friday, July 11, 2008 8:09 PM
    Moderator
  • Well.. are you asking if you can deploy OCS in one domain (site) and still can other domain users connect to this OCS?

    I assume that each domains are located in different forest. in that case you can deploy OCS in one domain and follow the following link to ensure that users from other domains can be hosted in the OCS domain.

    http://blogs.technet.com/ramo/archive/2008/06/29/inter-forest-lcs-ocs-deployment-without-identity-integration-application-miis-iifp-etc.aspx


    Regards,
    R. Kinker
    MCSE 2003 (Messaging), MCTS - LCS 2005, MCTS - OCS 2007
    http://www.ocspedia.com
    http://www.itcentrics.com/LCS_Home.htm
    Sunday, July 13, 2008 8:53 AM
  • Jeff >> But federation implies an OCS (SE in my case) for each site, and Access Edge Servers in addition... In this case we have a serious cost issue. However, it was the only solution I came with.
    Kinker >> It seems very messy to me, but thanks for the tip.

    I think the best solution is to convince the company to use a unique forest for all of its domains.
    Tuesday, July 15, 2008 9:42 AM
  • Without a doubt your last statement is most correct.  Sharing forests across any political/busniess boundaries can be quite a headache.
    Tuesday, July 15, 2008 1:22 PM
    Moderator
  • So, if I understand things correctly :
    Multiple domains in multiple forests is bad, and require OCS SE & Access Edge Server in each domain.
    Multiple domains in a unique forest is ok, and only require an OCS SE.
    Is it ok?
    I prefer to ask to make things clear.

    Thanks.
    Thursday, July 17, 2008 8:18 AM
  •  

    Hi,

     

    What you asked in your first post corresponds exactly to what is called a Central Forest topology. Even if you don't want to use Edge roles, this topology will fit to your architecture:

    Look at the Central forest architecture in the OCS_MultipleForestDeployment.doc from MS and the blog posted by Kinker for users synchronisation.

    http://www.microsoft.com/downloadS/details.aspx?FamilyID=1d7cf1e6-6770-422f-b744-e1764f5666ae&displaylang=en

     

    Thursday, July 17, 2008 11:00 AM
  • Hi,

    The situation is pretty clear now, because the domains are going to be merged into a single forest.
    In that case, I can deploy OCS in the future root domain, and the other domains will have access to it?

    Thanks.
    Friday, July 18, 2008 1:40 PM
  • Saturday, July 19, 2008 9:53 AM
    Moderator
  • OK,
    This is the second post about ressource forests, maybe I should really give it a try. What is stopping me is the importation of users from a forest to another.
    Thanks.
    Monday, July 21, 2008 7:39 AM
  • Hi

     

    To import/synchronize users, two options: ILM 2007, or scripts (see sidmap in OCS ResKit).

     

     

    Tuesday, July 22, 2008 2:48 PM