?
Solved

How do I bulk change UPNs in SBS 2008

Posted on 2014-08-17
4
Medium Priority
?
512 Views
Last Modified: 2014-08-17
I am asking this question because of errors in DirSync synchronizing SBS 2008 (Exchange 2007) to Office 365.

I have determined that the reason my DirSync is failing is because the UPN doesn't match the Office 365 user. When this server was originally setup (not by me!), the users were setup like this:

User: Joe Smith
Login: JoeSmith@domain.local
Email: JoeS@domain.com

Before when I tried to sync it would fail with this error for each user:

Identity: JoeUser@domain.local
Error: Unable to update this object because the following attributes associated with this object have values that may already be associated with another object in your local directory services: [ProxyAddresses X500:/o=first organization/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=JoeU;]. Correct or remove the duplicate values in your local directory. Please refer to http://support.microsoft.com/kb/2647098 for more information on identifying objects with duplicate attribute values.
 
Now I have at least fixed the "local" domain and now I get this:

Identity: JoeUser@domain.com
Error: Unable to update this object because the following attributes associated with this object have values that may already be associated with another object in your local directory services: [ProxyAddresses X500:/o=first organization/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=JoeU;]. Correct or remove the duplicate values in your local directory. Please refer to http://support.microsoft.com/kb/2647098 for more information on identifying objects with duplicate attribute values.

Here are my questions:

1. Is there a way to bulk edit the UPNs to be the same as the email address? If not, what's the best way to change them manually?

2. If I can do #1 above, will that affect how the users login, or can they still use first and last names? i.e. JoeUser

3. Or am I completely wrong about why this is failing and do I need to do something completely different?


Thanks for your help!!
0
Comment
Question by:MrComputerIT
  • 2
  • 2
4 Comments
 
LVL 60

Accepted Solution

by:
Cliff Galiher earned 2000 total points
ID: 40266773
The office 365 tool "idfix" can mass edit UPNs. But based on that error, I don't think it'll help. The issue looks like your accounts already have soft (or hard m) matches with accounts in azure AD, but the proxy address conflicts with a different account. This happens if you did a dirsync and then deleted accounts in o365. I am guessing the migration to o365 didn't follow their onramp process, which was written specifically to avoid issues like this.
0
 

Author Comment

by:MrComputerIT
ID: 40266821
We did do a DirSync and then deleted the accounts. Then we migrated and resetup DirSync. Is there a way to fix it after doing that?
0
 
LVL 60

Expert Comment

by:Cliff Galiher
ID: 40266829
Yeah, that was a huge mistake. You basically deleted the accounts that your on-prem accounts think they should match, so they won't sync with a different new account., which was created when you migrated. The documented migration process doesn't delete accounts so you don't have that problem.

Now you'll have to manually hard-match each account. There is no automated process to do this. So it can be time consuming. But less risky than exporting and importing data.

http://blogs.technet.com/b/praveenkumar/archive/2014/04/12/how-to-do-hard-match-in-dirsync.aspx
0
 

Author Comment

by:MrComputerIT
ID: 40266988
Deleting the deleted users solved the problem as well as correcting the UPN (removing the "domain.local" domain). It appears to be working correctly now.

Thanks for your help and pointing me in the right direction!
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

With so many activities to perform, Exchange administrators are always busy in organizations. If everything, including Exchange Servers, Outlook clients, and Office 365 accounts work without any issues, they can sit and relax. But unfortunately, it…
There can be many situations demanding the conversion of Outlook OST files to PST format and as such, there is no shortage of automated tools to perform this conversion. However, what makes Stellar OST to PST converter stand above the rest? Let us e…
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…
Suggested Courses

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question