I definitely recommend putting SQL on a separate server from Exchange. There is just too much resource contention otherwise. With only 12 users, you can actually get two lower powered servers for less than it'd cost to get one large server to run everything under one roof. It is server 2008 though, so RAM is important no matter how many (or how few) users you have.