How to connect to an organization in a different forest (multi organization collection) (4224878)

How to connect to an organization in a different forest (multi organization collection)

You will need to use an alternate account from the second organization\forest (not the MessageStats service account).

The following steps need to be taken for a successful connection and gathering of the second organization to take place:

The alternate account needs the following rights:
1. Member of the Local Administrator and MessageStats Admin group on the MessageStats server
2. Member of the MessageStats Admin group on the SQL server which houses the MessageStats database (In a clustered environment this may be a Domain Security Group)
3. Rights to the Exchange Organization:

• Exchange 2003 - Delegated View Only Administrator
• Exchange 2007 - Membership in the Exchange Organization Administrators security group
• Exchange 2010 - Membership in the Exchange Organization Management security group

4. Member of the Local Administrators group on each Exchange server in the organization

Note: Please ensure the account is not a member of the Domain Admins group.

The minimum trust required:
Domain A has MessageStats installed. Domain B holds the alternate account you want to use to connect to the second organization
1. In Domain A create an Outgoing Trust with Domain B
2. In Domain B create and Incoming trust with Domain A

Once the trust is in place confirm the alternate account has the rights stated above then test the connection:
1. Open the MessageStats console and right click on Exchange Organizations and select Connect
2. Specify the NetBIOS name of an Exchange server in the other organization and click Next (MessageStats Server Must be able to resolve the Netbios name of all Exchange Servers in the remote forest)

• Exchange 2003 - a mailbox server (with active stores and mailboxes)
• Exchange 2007 - a server with the mailbox role
• Exchange 2010 - a server with the CAS role. You must also specify a mailbox to which the account you are using to connect has full mailbox rights

3. Select Specify Explicit Credentials and put in the domain\user name of the alternate account and the password
4. Complete the wizard
5. The organization should now appear in the console

Next run a gathering task against the second organization. It is recommended to run a Default Gathering:
1. Rights click on the second organization name and select Create Task
2. Move though the wizard and when you come to Task Credentials uncheck Use Default Configuration at the bottom and specify the alternate account you used to connect to the exchange organization
3. Finish the wizard and run the task