mercredi 4 avril 2012 18:40
Does anyone know.....how Microsoft has setup its Online exchange and Lync services internally and externally in terms of domain namespace? Are they using different domain namespace internally and externally? I just want to know if I setup different domain namespace......can external users be able to easily access mailing service and lync services?
Just please make me clear that exchange 2010 and Lync can work in split namespace scenario...May be Microsoft guy can better explain this...please help.
By the way which scenario will be best in terms of security....split domain namespace or same domain namespace internally and externally?
Toutes les réponses
jeudi 5 avril 2012 05:17
The way we have it configured isn't really relevant I would say, but I'm not sure I understand the question. Is it, should split DNS be used, so that the same domain names are used inside and out, for things like URL's etc? Or should they be separate? Is that your question? If so, Exchange doesn't care, and it makes no difference from a security standpoint.
So what's your concern?
jeudi 5 avril 2012 10:04
Thanks for replying.....my concern is that ........which one is the best........in terms of security, feasibility and less configuration?
1. Same domain namespace internally and externally e.g abc.com internally as well as externally?
2. Different domain namespace internally and externally such as .... corp.abc.com internally and abc.com externally as Microsoft recommends? But in this case I am not sure if Lync can work.
Also I guess I need to do more configuration while configuring redirections from abc.com to corp.abc.com?
Thanks in advance..
jeudi 5 avril 2012 14:38
So we recommend AD not use the same namespace as your public namespace, not Exchange. Internally we use the corp.microsoft.com for AD, but Exchange uses split DNS, ie inside and out we use mail.microft.com.
Generally in the world of Exchange I recommend split DNS for Exchange - same names inside and out. Keeps Exchange URL's simple and cuts down on certificate complexities. You just need to maintain two DNS zones for the same domain (inside and out), that's all.
vendredi 6 avril 2012 10:30
Thanks a lot...........for solving my confusion....... can you please paste here some links (articles) which I can go through to understand this concept more?
And one more thing ...........how about Lync?
Many thanks in advance..
vendredi 6 avril 2012 16:05
I'm not aware of any articles specifically discussing this concept in its own right. Bing for "exchange 2010 split DNS" and there are a few articles that come up and would be worth a read.
You'll need to post the question to a Lync forum I suspect to get an answer for Lync, unless someone else knows here. I don't.
dimanche 8 avril 2012 08:05thanks Greg .............for prompt replies...!