Solved

Adding Exchange rights to AD 2008 users without mailboxes

Posted on 2010-09-01
4
858 Views
Last Modified: 2012-08-14
After posting in an older question I gave up temporarily. On a side search I found an answer to my problem and it works. However it is time consuming and where several accounts exist I'd like a quicker way to modify the advanced attributes of an account rather than via the Attribute Editor in AD Users & Computers MMC.

See: http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_26262511.html for more info.

Basically what has been happening is at the start of the year 100+ accounts were bulk created using csvde and for some reason in the creation process the default Exchange attributes were not passed onto a multitude of these accounts.

To allow the users to link into Exchange there are 2 ways of doing it, delete & recreate each account and then get phone calls when users passwords are reset, etc, reset user share attributes (SID's) or edit each account & copy & paste several long account settings into their AD account.

What I want to know is if there is some way using CSVDE for example to MODIFY an account rather than export/import..

I had a look at dsmod but it looks like the extended attribute set isn't available.

Extended attribute set needing modified (defaults):
homeMDB
homeMTA
msExchHomeServerName
msExchRecipientDisplayType
msExchRecipientTypeDetails
msExchVersion
showInAddressBook

Per-user attributes:
legacyExchangeDN
proxyAddress
textEncodedORAddress

Any help would be appreciated
0
Comment
Question by:kiwistag
4 Comments
 
LVL 8

Expert Comment

by:Saineolai
ID: 33582558
I'm not sure if it suits your scenario but you might also check out the suitability of ldifde.
0
 
LVL 7

Expert Comment

by:ms-pro
ID: 33582739
0
 
LVL 16

Accepted Solution

by:
Postmaster earned 500 total points
ID: 33582778
Hi, LDIFDE can be used to modify AD accounts.
There can be some confusion as you are doing an IMPORT of the data file to make the desired changes.

This link http://support.microsoft.com/kb/237677 desrcibes the commands. Note that when you run LDIFDE (default is Export-mode) you get a list of data that you can use as a base for the change.

Word is really handy for search/replace of text. the file type is TXT, but they use .ldf

Some values cannot be changed, but you will find out which with a few tests.
If you have any errors, the import will stop. The error file will identify the problem record.
The quickest fix is to remove the problem record and re-run.

One good feature of this process is the original Export can be used (as an Import file) to quickly back out all changes.
0
 
LVL 6

Author Comment

by:kiwistag
ID: 33607761
I'll give it a shot today or tomorrow hopefully once reports of more accounts playng up come in.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Troubleshooting config for mail flow on ASA 5525 3 39
OUTLOOK, KERBERO, NTLM 1 26
accessing the windows\csc folder 5 68
exchange, outlook 2 26
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
Read this checklist to learn more about the 15 things you should never include in an email signature.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now