Dear , I have exchange 2007 with 2 mailbox ccr , 2 cas , 2 edge , with windows server 2003 when i run Best Practice Analyzer , it cannot connect to the EDGE server , coz they r in the workgroup , and i am login by my domain admin account to any domain server (cas or mailbox) and ofcourse i can;t add my domain account to the edge servers ( coz they are in the workgroup) ,and even mail flow tracker cannot connect to edge i think because of the same problem (the permission at the edge) , so what to do to make the BPA or mail flow tracker access the Edge server, i check the help by microsoft , and everything is greate (ping is working , remote registry and Server Services are running) another question , it recognize the mailbox CCR as one server and called as (the name of the cluster) , so how can i check each server independence , or it is not necessary?? thanks for your help

Me the same as you....any post to you with the solution???should that be a normal state?

Hi,What is the detail error for Edge in ExBPA report,please try to post here.Besides,please ensure that you have Subscribed the Edge Transport Server to the Exchange Organizationhttp://technet.microsoft.com/en-us/library/bb125236.aspxFor CCR mailbox, I think when we run ExBPA,it will try to connect to the active node and then check the health for that server.Regards,Xiu

The error is:Exchange Server cannot be contacted.Exchange server SERVER_EDGE is down or unreachable. This could be the result of a network or permissions problem. Error: Security error.I have the subscription well configure, its working for same weeks. I have do anything about configure correctly the edge transport server (network configuration, not domain, etc....)Any ideas?, thanks a lot

hi again even i try to do it vice versa , i run the tool in edge server , and it cannot connect to cas with the follosing message Exchange server CAS_Server is down or unreachable. This could be the result of a network or permissions problem. Error: Security error. so how can i use account to access the two server at the same time , while one of them in the domain and the other in the workgroup , it is impossible to do that so kindly provide me with a way to use this tool regards

hi any suggestion about the solution !! regards,

I found a wired way but it works great create exchange user in the domain let me say username: exchangeuser password: exchangepassword and put him in groups (domain admins ,and Exchange View-Only Administrators) then go to the all edge servers which they r in DMZ , and creat user with the same username and the same password: username: exchangeuser password: exchangepassword and put him as a local administrator of each edge server then go to mailbox or cas or any server in your domain and login to the server by this account (exchangeuser) and run the tool .. it works for me , i know it is wired because on in domain and the others in DMZ but it works great. or u can login to the server by any account , but when u run the Best Practice Analyzer tool ,befire u select (connect to active directory server) , click (show advanced login option) and check the two check box and put the username and password and the domain as the user exchangeuser. and it will works great Regards,

Hi, Sorry for the late reponse.Base on my deep researchit is an expected behavior. Let me explain more: When we run ExBPA on internal servers, we are using the domain (admin) account. When ExBPA trying to connect to edge WMI service and/or Remote Registry service, domain admin account is used. As edge is not a member of the domain, the domain admin account is not trusted, access is denied. So please ignore this alert in ExBPA. Regards, Xiu