Solved

Using ADModify to change delivery restrictions in Microsoft Exchange

Posted on 2008-10-28
4
1,397 Views
Last Modified: 2013-12-24
I am using ADModify to bulk change mailbox delivery restrictions across one of the information stores.  I have created a security group containing the members of the individuals allowed to send to these mailboxes.

On a test account, the security group was applied using the GUI and tested successfully

Now to bulk modify
In ADModify, I have applied the LDAP fillter associated with the specific information store and selected all (240 accounts). Custom tab - authOrig and applied the distinguished name of the secutiy group.

The problem is that although the changes are  100% successful, no one can send mail to these accounts. Not even members of the applied security group. The group was removed using the null value and everything is back to the default value and working properly. I have also attempted to do this on a reduced number of accounts (20) and had the same results

0
Comment
Question by:jb747
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 71

Expert Comment

by:Chris Dent
ID: 22841863

Hey,

authOrig can only contain Users (or really mailboxes). If you're adding a group you must add it to dLSubmitPerms.

It makes for a very odd split.

Chris
0
 

Author Comment

by:jb747
ID: 22843838
I've included snapshots of the results. Using dLSubmitPerms returns 0% success. In review of the variable, I don't see it when I look in Adsiedit.msc. Am I doing something wrong ? Still need to use the custom field correct ?
dlsp.jpg
dlspresults.jpg
0
 
LVL 71

Accepted Solution

by:
Chris Dent earned 500 total points
ID: 22843879

Sorry, my fault. Try dLMemSubmitPerms.

Chris
0
 

Author Closing Comment

by:jb747
ID: 31510736
That's it...everything worked as expected. Thank you.
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision Office 365 tenants, synchronize your on-premise Active Directory, and implement Single Sign-On.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Azure AD / OAUTH 2 35
GPO denied - but why ? 6 48
Certificate Questions - Exchange 2016 11 37
Any benefit to adding a Clustered index here? 4 30
In-place Upgrading Dirsync to Azure AD Connect
A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question