Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 880
  • Last Modified:

Adding Exchange rights to AD 2008 users without mailboxes

After posting in an older question I gave up temporarily. On a side search I found an answer to my problem and it works. However it is time consuming and where several accounts exist I'd like a quicker way to modify the advanced attributes of an account rather than via the Attribute Editor in AD Users & Computers MMC.

See: http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_26262511.html for more info.

Basically what has been happening is at the start of the year 100+ accounts were bulk created using csvde and for some reason in the creation process the default Exchange attributes were not passed onto a multitude of these accounts.

To allow the users to link into Exchange there are 2 ways of doing it, delete & recreate each account and then get phone calls when users passwords are reset, etc, reset user share attributes (SID's) or edit each account & copy & paste several long account settings into their AD account.

What I want to know is if there is some way using CSVDE for example to MODIFY an account rather than export/import..

I had a look at dsmod but it looks like the extended attribute set isn't available.

Extended attribute set needing modified (defaults):
homeMDB
homeMTA
msExchHomeServerName
msExchRecipientDisplayType
msExchRecipientTypeDetails
msExchVersion
showInAddressBook

Per-user attributes:
legacyExchangeDN
proxyAddress
textEncodedORAddress

Any help would be appreciated
0
kiwistag
Asked:
kiwistag
1 Solution
 
SaineolaiCommented:
I'm not sure if it suits your scenario but you might also check out the suitability of ldifde.
0
 
ms-proCommented:
0
 
PostmasterCommented:
Hi, LDIFDE can be used to modify AD accounts.
There can be some confusion as you are doing an IMPORT of the data file to make the desired changes.

This link http://support.microsoft.com/kb/237677 desrcibes the commands. Note that when you run LDIFDE (default is Export-mode) you get a list of data that you can use as a base for the change.

Word is really handy for search/replace of text. the file type is TXT, but they use .ldf

Some values cannot be changed, but you will find out which with a few tests.
If you have any errors, the import will stop. The error file will identify the problem record.
The quickest fix is to remove the problem record and re-run.

One good feature of this process is the original Export can be used (as an Import file) to quickly back out all changes.
0
 
kiwistagAuthor Commented:
I'll give it a shot today or tomorrow hopefully once reports of more accounts playng up come in.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now