Adventures in identity management
At one of my customers we’ve started provisioning all new users directly to Exchange 2010, while the old users are being progressively migrated from Exchange 2007. I modified the provisioning code for Exchange 2010 (basically just adding the msExchHomeServerName attribute as explained in this doc) and new users and mailboxes were created just fine. What…
I’m still working on clearing up an enormous number of public folders prior to migration to Exchange 2010 (from 2007). The permissions structure was not well managed so I have been applying a set of standard groups (Read, Update and Change) to each PF, and at the same time removing any rights granted to Everyone…
I am completely sick of the sight of this error: WARNING: Object \public folder pathĂ‚Â Ă‚Â Ă‚Â has been corrupted and it is in an inconsistent state. The following validation errors have occurred: WARNING: The Name property contains leading or trailing whitespace, which must be removed. So here’s powershell script to find and rename the offending folders. (Why…
Here is a script I wrote to do a simple GAL synchronization between two Exchange organizations. The script finds the mail-enabled users in one domain, and creates contacts for them in the other domain. Existing contacts will also be updated and deleted as needed.
I have just posted this article in the Greatest Hits series on the ILM Technet forum. http://social.technet.microsoft.com/Forums/en-US/identitylifecyclemanager/thread/f8ad045d-7252-4cd1-a189-d704a8f99129 The article covers various management tasks you can acheive with the standard AD MA, including provisioning and updating of users, mailboxes, contacts and distribution groups. There are quite a few code samples as well.
Quite unexpectedly this week, I got to genuinely use SCR “in anger” whenĂ‚Â I killed a client’sĂ‚Â production Exchange 2007 server by attempting to installĂ‚Â SP2 on it (for that whole sorry story see http://social.technet.microsoft.com/Forums/en/exchangesoftwareupdate/thread/713d2b17-f19d-4eaf-8146-c51f59942d08?prof=required). I’ll keep my swearing about SP2 off the page here and focus on the hero of the week – which was SCR!
I just got this error while attempting to provision Exchange 2007 users with ILM 2007 FP1: Event Type:Ă‚Â Ă‚Â Ă‚Â Error Event Source:Ă‚Â Ă‚Â Ă‚Â MIIServer Event Category:Ă‚Â Ă‚Â Ă‚Â Server Event ID:Ă‚Â Ă‚Â Ă‚Â 6801 Date:Ă‚Â Ă‚Â Ă‚Â Ă‚Â Ă‚Â Ă‚Â 15.09.2009 Time:Ă‚Â Ă‚Â Ă‚Â Ă‚Â Ă‚Â Ă‚Â 10:14:02 User:Ă‚Â Ă‚Â Ă‚Â Ă‚Â Ă‚Â Ă‚Â N/A Computer:Ă‚Â Ă‚Â Ă‚Â ILMSERVER Description: The extensible extension returned an unsupported error in MIIS. The stack trace is: “Microsoft.MetadirectoryServices.ExtensionException: ****…
I’ve been doing a bit of work with SCR lately, the point being to achieve a “poor man’s failover” for the mailbox server role. Not everyone needs the immediacy, or the expense, of a cluster, and SCR was a welcome addition to the redundacy capabilities of Exchange 2007 – but I couldn’t find a complete…
Just a quick post about this technote: http://technet.microsoft.com/en-us/library/cc671176.aspx It claims this bug was fixed in rollup 4, but after struggling with a server with rollup 7 installed for many hours today, I can confirm that this bug is not fixed, and you do need to follow the procedure in the technote. The bug concerns Outlook…
A while back I proposedĂ‚Â a powershell XMA approach to the problem of adding Exchange 2007 mailboxes to existing AD users. This was because my old method of adding an Exchange 2003 mailbox by populating a couple of extra attributes did not seem to work with Exchange 2007. However, inĂ‚Â a recent thread on the…