• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 72
  • Last Modified:

exchange 2007

I have EXCHNAGE 2007 ENVIRONMENT


we have resource forest setup where mail.lan is exchange forest linked to another AD account forest. exchange mailboxes are linked mailboxes .

my boss asked me below to find out , any guesses what is he trying to ask and where should I find it

 "how are the users in the mail.lan domain linked back to their primary domain? Which attribute?"
0
pramod1
Asked:
pramod1
  • 13
  • 10
1 Solution
 
AkhaterCommented:
The info you are looking for is here

http://hasslauer.com/blog/?p=143

What he wants to know is the relationship between the A user in the account forest and the AD user in the resource forest
0
 
AkhaterCommented:
The info you are looking for is here

http://hasslauer.com/blog/?p=143

What he wants to know is the relationship between the A user in the account forest and the AD user in the resource forest
0
 
pramod1Author Commented:
cant I check the attribute of exchange users through GUI like mine is on disabled AD

like my properties
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
Obi WanFixerUpperCommented:
Its the Sid mate, in the doc above its the AccountDomainSid
0
 
AkhaterCommented:
Did you read the article? Everything you need is there with screenshots
0
 
pramod1Author Commented:
I can see the commands clear, can you somehow enlarge it and send
0
 
AkhaterCommented:
I'm not the author of the article I don't have the screen shots
0
 
pramod1Author Commented:
or can you write in the scripts
0
 
pramod1Author Commented:
can t load AD module in Exchange management shell
0
 
AkhaterCommented:
man you lost me you asked about the linked properties and it is clearly written in the article i sent you

LinkedMasterAccount
msExchMasterAccountSid

and the SID of the user in the account forest is giving full permission on the mailbox in the resource forest
0
 
pramod1Author Commented:
I cant read the script properly from screen shot, can u put in text
0
 
pramod1Author Commented:
in EMS it says cant load any AD module
0
 
AkhaterCommented:
You don't need it

Get-Mailbox  username | fl

Will show you the LinkedMasterAccount

And you can use ad users and computers for msExchMasterAccountSid as shown in the picture below

http://www.msexchange.org/img/upl/image0041141045519890.jpg

Picture taken from http://m.msexchange.org/articles-tutorials/exchange-server-2003/management-administration/Understanding-External-Associated-Account-Windows-Server-2003-Exchange-2003.html which shows you how to check the permissions too
0
 
pramod1Author Commented:
I am seeing in attribute additor it is in hexa decimal
0
 
pramod1Author Commented:
akhater:

I see in attribute editor some hexadecimal figure, what should I give him
0
 
AkhaterCommented:
What are you trying to do?
0
 
AkhaterCommented:
You don't need to give him the sid

The attributes he asked for are

LinkedMasterAccount
msExchMasterAccountSid

These are the attributes their values will change for every user
0
 
pramod1Author Commented:
he asked me below question

how are the users in the mail.lan domain linked back to their primary domain? Which attribute?"

I ran get-mailbox identity my name | ft name, linked master account I got the result

what attribute should I tell him
0
 
pramod1Author Commented:
so I should tell him

these are below

LinkedMasterAccount
 msExchMasterAccountSid

am I correct?
0
 
AkhaterCommented:
Yes

LinkedMasterAccount points to the account in the users forest

msExchMasterAccountSid points to the sid of that account

Finally that account has full access to the mailbox

That's it
0
 
pramod1Author Commented:
msexchange master account sid points to account forest and not exchange forest
0
 
pramod1Author Commented:
2)      The disabled account in the resource forest has an attribute called msExchMasterAccountSid that stores the value of the objectSid attribute of the corresponding user in the account forest.
0
 
pramod1Author Commented:
got it
0
 
AkhaterCommented:
Exactly
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 13
  • 10
Tackle projects and never again get stuck behind a technical roadblock.
Join Now