Exchange 2003 on a domain controller.

[dgarner58]

I have setup multiple Exchange 2000 installs on Win2k networks...and the official word has always been from microsoft...Exchange CAN run on a DC but it is not recommended due to server load. I am reading the same thing for 2003 but cannot find anything "official" written by microsoft stating it. The exchange support team there will tell you this is the case but there are no knowledge base articles that I can find to back them up. Is there anyone out there that has found and could link to an article stating that this is not a recommended solution? A customer bid is depending on this info. One company is telling them it's ok and we are telling them it isn't recommended. They are wanting proof from MS that it isn't recommended.Their current # of mailboxes is over 2000. Exchange on a DC is usually not doable except in small companies with no other choice. Any help out there?

 

[ashleym]

Well in a small business server environment, limited to 50 users, you have only one DC and it does all. The few installs I have done, up to 100 people have been with Exchange 2003 as a DC, either PDC, or BDC, I would say its ok, as long as the hardware is scaled accordingly.

AM

 

[zoeythecat]

Dgarner,

I'm with your original thought that this should not be done. You should install this on a Member Server. This has always been Microsofts recommendation regardless of what version of Exchange you are running (55, 2000, 2003). I'm not sure of any Microsoft articles based on this but I would advise you to call Microsoft and open up a case. You will not get charged after the call is finished because it would be considered an informational call. They should be able to provide you the reasons why and i'm sure if there are any links related to this subject they would surely pass it on.

Good luck

 

[Casbot]

Putting Exchange (any version) on a DC is BAD! Keep in mind that if you use the OWA feature of Exchange, you have to give the Domain Users group "Log on Locally" permission. Do you want Joe Blow to have the ability of logging onto a domain controller locally? I know I wouldn't. There's just too much security risk. Then if that one server is the only Exchange Server and you want to allow the users to access their email via OWA from the internet, you've now put a domain controller at the mercy of the internet and possibly exposed it to vunerabilities that will eventually end up being hacked. Whether or not you use OWA, it will still need to use SMTP so therefore you've now exposed your DC to the internet via SMTP as well.

Casbot

 

[dgarner58]

Thanks for the replies guys. I know all of this stuff. What I need is something OFFICIAL from MS. Officially...they support E2k3 on a DC....but we all know that isn't recommended.