• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 102
  • Last Modified:

exchange 2007, scripts

I am attaching script which I use to create bulk mailbox in resource forest setup.

the only thing I am missing AD groups  , I need to make them manually member of some groups like active sync, tablets group,

is there any way I can edit my script so that users created are also having members of AD groups so I don't need to manually add for each  user.
mailbox-script-main-1.txt
0
pramod1
Asked:
pramod1
  • 6
  • 5
  • 4
1 Solution
 
Todd NelsonSystems EngineerCommented:
Unfortunately you cannot use New-Mailbox or Set-Mailbox to add a distribution group for a user mailbox.

Try using Add-DistributionGroupMember ... https://technet.microsoft.com/en-us/library/bb124340(v=exchg.160).aspx

When I've scripted adding users to distros, I've had to add users one by one to the distro because I could not add multiple users at once to a group.  Therefore the CSV would look like this...

User,DistroGroup
JDoe,Group1
JDoe,Group2
JDoe,Group3
JSmith,Group3
JCool,Group1
JCool,Group4

Open in new window


Hope thise helps.
0
 
AkhaterCommented:
Import-CSV CreateMailboxes-tt.csv | ForEach {
New-Mailbox -Alias $_.alias -Name $_.name -FirstName $_.Givenname -LastName $_.Surname -userPrincipalName $_.UPN -Database “Field Mailbox Database” -OrganizationalUnit ' Email accounts' -Password $Password -LinkedDomainController "domain..COM" -LinkedMasterAccount "domain\$($_.Name)";
Get-ADUser -Filter {userprincipalname -like $_.upn} | Disable-ADAccount
Add-DistributionGroupMember -Identity "ActiveSync" -Member $_.upn
Add-DistributionGroupMember -Identity "OWA" -Member $_.upn
}


$Password=Read-Host “Enter Password” –AsSecureString
0
 
pramod1Author Commented:
Hi akhater,

I will set up like this tomorrow and let you know , just to confirm whether user is a member of security or distribution group the command will follow the same ?

thanks
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
AkhaterCommented:
This is for distribution groups  it can be a security group but it has to be email enabled in exchange
0
 
AkhaterCommented:
This is for distribution groups  it can be a security group but it has to be email enabled in exchange
0
 
pramod1Author Commented:
it is a universal distribution group mail enabled I just cheked now

but when I execute the script in exchange shell do I need to type like colon or semi colon after disable-AD account or add the line which you mentioned

Get-ADUser -Filter {userprincipalname -like $_.upn} | Disable-ADAccount
 Add-DistributionGroupMember -Identity "ActiveSync" -Member $_.upn
 Add-DistributionGroupMember -Identity "OWA" -Member $_.upn
 }
0
 
AkhaterCommented:
You do not need to add the ; it can be replaced by an "enter"  at the end of each line
0
 
AkhaterCommented:
If you want to run it as one line then you need to add the semicolon
0
 
pramod1Author Commented:
thanks I will let you know tomorrow
0
 
pramod1Author Commented:
where we have exchange and disabled AD accounts on the same exchange server, I tried adding last 2 lines(distribution group) in the script but it didn't add the user in the group but the script as a whole ran successfully
 first question

 1)  have I missed anything, I am running all in one line
 2) we have enabled AD accounts in domain.com, I am right now manually creating those accounts and then running the script

 which creates Disabled AD accounts and exchange account in resource forest, can I run separately a script so it creats enabled AD ACCOUNTS in the account forest domain.com

 3) when the script runs on the exchange side I want user@domain-retail.com also added in the email address as primary

 Import-CSV CreateMailboxes-tt.csv | ForEach {
  New-Mailbox -Alias $_.alias -Name $_.name -FirstName $_.Givenname -LastName $_.Surname -userPrincipalName $_.UPN -Database “Field Mailbox Database” -OrganizationalUnit ' Email accounts' -Password $Password -LinkedDomainController "domain..COM" -LinkedMasterAccount "domain\$($_.Name)";
  Get-ADUser -Filter {userprincipalname -like $_.upn} | Disable-ADAccount
  Add-DistributionGroupMember -Identity "ActiveSync" -Member $_.upn;
  Add-DistributionGroupMember -Identity "OWA" -Member $_.upn;
  }

I am running this as one whole line , script runs but never makes the user member of those groups
0
 
Todd NelsonSystems EngineerCommented:
If you are not the manager of those specific distributions groups, you will need to add the "-BypassSecurityGroupManagerCheck" parameter to the end of each of those commands...

Add-DistributionGroupMember -Identity "ActiveSync" -Member $_.upn -BypassSecurityGroupManagerCheck

Open in new window


Add-DistributionGroupMember -Identity "OWA" -Member $_.upn -BypassSecurityGroupManagerCheck

Open in new window


That parameter will allow the user to be added to the DG without manager permission.
0
 
pramod1Author Commented:
I am the admin and I need to add the users in those group, right now after script runs then I need to go to user propertie sin AD and then add them to those groups

can you put in the script
0
 
Todd NelsonSystems EngineerCommented:
Disregard what I recommended about using the "-BypassSecurityGroupManagerCheck" parameter.  That parameter is not available in and does not apply to Exchange 2007.
0
 
pramod1Author Commented:
so what am I missing here I am running all in one line and that email distribution group is not adding to user properties.

Import-CSV CreateMailboxes-tt.csv | ForEach {
   New-Mailbox -Alias $_.alias -Name $_.name -FirstName $_.Givenname -LastName $_.Surname -userPrincipalName $_.UPN -Database “Field Mailbox Database” -OrganizationalUnit ' Email accounts' -Password $Password -LinkedDomainController "domain..COM" -LinkedMasterAccount "domain\$($_.Name)";
   Get-ADUser -Filter {userprincipalname -like $_.upn} | Disable-ADAccount
   Add-DistributionGroupMember -Identity "ActiveSync" -Member $_.upn;
   Add-DistributionGroupMember -Identity "OWA" -Member $_.upn;
   }

also I posted another question where I am running script bulk add user account creation and I am getting this error
Capture1.JPG
0
 
Todd NelsonSystems EngineerCommented:
I suggest opening a new request since you already awarded points to this question.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 6
  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now