Link to home
Start Free TrialLog in
Avatar of skbarnard
skbarnard

asked on

LDAP query

I work for a school district and we're in the midst of migrating our email from Exchange to Google.  In this process, we've now given students an email account.  The students were placed in a sub-domain of our district domain so they are "@student.domain.com"
I have some distribution lists (groups) that are dynamic in Exchange .  The dynamic groups migrated OK but the members of the group did not.
We're now trying to find the right LDAP query attribute to use with the GADS migration tool so the list will again be populated.  We found that the msExchDynamicDLFilter will work to populate the lists (groups) but it now adds students as well.  These groups (lists) should only have staff and teachers as members.
Here's an example of the LDAP query for the msExchDynamicDLFilter:
(&(!cn=SystemMailbox{*})(& (mailnickname=*) (| (&(objectCategory=person)(objectClass=user)(!(homeMDB=*))(!(msExchHomeServerName=*)))(&(objectCategory=person)(objectClass=user)(|(homeMDB=*)(msExchHomeServerName=*))) ))) (this is for everyone in the district - we also have lists (groups) for all school sites so here's an example of that query:
(&(physicalDeliveryOfficeName=*SchoolName*)(!(name=SystemMailbox{*))(!(name=CAS_{*))(!(msExchRecipientTypeDetails=16777216))(!(msExchRecipientTypeDetails=536870912))(!(msExchRecipientTypeDetails=8388608)))
My question --- what would I need to add to the above (or exclude from the above) to make sure the students or the student sub-domain are excluded in the query statement?
Avatar of Chris Dent
Chris Dent
Flag of United Kingdom of Great Britain and Northern Ireland image

If you want to target the primary email address:

(!(mail=*@student.domain.com))

If you want to target any e-mail address:

(!(proxyAddresses=smtp:*@student.domain.com))

HTH

Chris
Avatar of skbarnard
skbarnard

ASKER

Sorry for the delay - I've been slammed with this email migration project.
Do you have any idea if this will work with Google without having to have Exchange in the mix?  At some point, we're going to decommission our Exchange servers and I'm assuming the groups/lists will quit working for sure when that happens.
Not necessarily. If you're using the Google Directory synchronisation tool they should continue to work. Support for dynamic groups is fairly widely advertised.

I can't tell you categorically that this will be true, I don't have the directory synchronisation tool, but I think you have good reason to expect it to work.

Chris
ASKER CERTIFIED SOLUTION
Avatar of Chris Dent
Chris Dent
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Again, sorry for the delay in my response, the project has been completely migrated.  I ultimately found out that once we turn off (decommission) our Exchange servers that the lists would no longer work.  Therefore, I had to delete the 'dynamic' group and create a global security group, populate the members then the GADS process was run to migrate the groups over to Google.
The links provided by Chris are good links to have.