OWA on Exch 2000

[lech]

Hello

I'm fishing for info on OWA on Exch 2000/W2000 domain. We presently have a Exch 5.5 OWA box in the dmz in its own domain communicating with a 5.5 box on our internal network. We are migrating to 2000 in a few months, we would like to keep a similar setup with OWA in the dmz for 2000. Anyone have any links to docs on this - does the 2000 dmz box have to be a member of the internal AD domain or what options are available???

Thanks

Lech

 

[ashleym]

Well the first thing is that unlike OWA 5.5, you cannot separate OWA from the exchange server. Exchange 2000 requires AD, so for your scenario to work the Exchange server in the DMZ would have to be running AD or you would have to have to separate AD domains trusting eachother.

If I may ask, why do you presently have it set up this way? What do you think you are gaining in terms of security?

Ashley

 

[lech]

It's on a different box to seperate the load - regarding dmz placement - presumably the logic is if the OWA box is compromised then only specific ports are allowed access to specific servers on the internal network and the OWA box is not a member of the internal domain.