Greetings,

I'm not sure if this is possible but here's my situation:
We have several external users, that have Active Directory accounts set up on our domain to access an internal web app:  For the purpose of the posting I'll call our domain:  domain.com.  
Their primary email accounts reside on another domain:  (i.e.  consultants.com)    I set them up with Active Directory accounts on our domain and associated their external email address to their AD account, 'MailUser' accounts.

My question is, when accessing owa with their AD account, they see a message: (and I believe this is expected behavior being the user is a MailUser and not a Mailbox User):

    "The Outlook Web App address https://owa.domain.com/owa is out of date."

Is there a way for me to set this MailUser account up to access the "domain.com" email address using outlook web app?  I'm thinking I already know the answer, which is No, because it's not a Mailbox user, but a MailUser and the 'Mailbox Features' such as Outlook Web App are not available to MailUser accounts.

Unless, someone has come up with a work-around, which is the reason for my post.

Thank you,

hello dears,
this is my first question so I beleive everyone will guide me on solving the issue.

Subdomains (child domains) objects Missing from Active Directory Users and Computers in the parent domain.

I have one parent domain ( name it domain_parent) with 2 DCs (DC1 and DC2)
and two child domains, each child domain has one DC (DC3 and DC4)

all are windows 2012 R2 servers

and all DCs in all domains are global catalog servers

the replication is OK, I can search all objects from all domains by using Active Directory administrative center, repadmin result stating that the replication was successful

I beleive that the issue is related to DNS, but i do not know where exactly, the DC1 has a primary DNS and child domains are active directory integrated.

from network properties, the DNS servers are set as follow:
DC1:
DNS Server : the IP of itself
DC3:
DNS Server1: the IP of DC3
DNS Server2: IP of DC1
DC4:
DNS Server1: the IP of DC4
DNS Server2: IP of DC1


can anyone please guide me on what is the issue and how I can resolve it?


thank you

We are running two DC's and have a user account that continues to get locked out of their primary system.  Netlogon debug shows the following:

07/23 22:47:43 [LOGON] [20080] xxx: SamLogon: Transitive Network logon of (null)\user from Rdesktop (via DC02) Entered
07/23 22:47:43 [LOGON] [20080] xxx: SamLogon: Transitive Network logon of (null)\user from Rdesktop (via DC02) Returns 0xC000006A
07/23 22:47:44 [LOGON] [34652] xxx: SamLogon: Transitive Network logon of (null)\user from Rdesktop (via DC02) Entered
07/23 22:47:44 [LOGON] [34652] xxx: SamLogon: Transitive Network logon of (null)\user from Rdesktop (via DC02) Returns 0xC000006A


Corresponding Event Viewer entries
The computer attempted to validate the credentials for an account.

Authentication Package:      MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon Account:      user
Source Workstation:      Rdesktop
Error Code:      0xc000006a


I have removed the user account from the system and put back on and continue to get the error.

Problems,
We migrated a company from On premise Exchange 2010 to Office365 and had DR Sync working. Everything went OK.
We then uninstalled old Exchange server (need to decommission  server from service, don't need it as we are on Cloud) and as soon as we did this we lost the ability to end outbound emails as they started to come in from @onmicorosft.com instead of @companydomain.com
So we dialed our Exchange Cloud consultant who says following and now it has me very concerned (as he contradicted to what he said before
1 - to fix the issue we have to create new profile. This is bad as we would have to re-download OST file again, and bandwidth is somewhat slow. We really need to fix on premise outlook without new profile.
2 - he says that if I migrate to the cloud but want to keep Dir Syn I must keep on premise Exchange (is that true? what is a point of migrating to the Cloud?)
so I can not have Office365 setup and have ON Premise DC talking to it without also maintaining local Exchange server?

Hi Experts

I'm not sure I'm even going to use the correct terminology in this question. Please forgive me.

I want to query two different OUs on the same level. The queries below work independently but I need to combine them so that I end up with one recordset (which is sorted - but I know how to sort it).

1.   "<LDAP://OU=all staff,OU=birmingham office,DC=mertonhatfield,DC=local>;" & "(&(objectclass=user)(objectcategory=person));" & "name,title,distinguishedName,userPrincipalName;subtree"

2.  "<LDAP://OU=reception users,DC=mertonhatfield,DC=local>;" & "(&(objectclass=user)(objectcategory=person));" & "name,title,distinguishedName,userPrincipalName;subtree"


To clarify :

1.  mertonhatfield.local\birmingham office\all staff
2.  mertonhatfield.local\reception users

Please can you tell me how to combine the two?

Many thanks.

is it possible to get corresponding email attribute from object property of user

I have 4 domain controllers and 3 of them are pointing to the fourth as the time server. I am taking this fourth server offline and need to move the time server to one of the other three.  How do I change the time server to another domain controller?

People,

I've got multiple Exchange Server 2013 running CAS role in my company domain.

AD Sites: Default-First-Site-Name
PRODMBX14.domain.com [MBX & CAS role] --> To be decommissioned, no more mailbox running.
PRODMBX20-VM.domain.com [MBX & CAS role] --> newly built and operational.

AD Sites: Head Office
PRODMBX30-VM.domain.com [MBX role] --> Production.
PRODMBX42-VM.domain.com [MBX & CAS role] --> Production.


But when I browse to the Send Connectors section My domain Internet Email Connector click on Edit then Scoping:

Address Space:
Type SMTP
Domain *
Cost 1

What is source server ? Do I need to add the other CAS server role here to send out email or all Exchange Server in my domain ?
Source Server:
PRODMBX14.domain.com

Get-SendConnector -Identity "My domain Internet Email Connector" | fl

AddressSpaces                : {SMTP:*;1}
AuthenticationCredential     : 
CloudServicesMailEnabled     : False
Comment                      : 
ConnectedDomains             : {}
ConnectionInactivityTimeOut  : 00:10:00
DNSRoutingEnabled            : False
DomainSecureEnabled          : False
Enabled                      : True
ErrorPolicies                : Default
ForceHELO                    : False
Fqdn                         : 
FrontendProxyEnabled         : False
HomeMTA                      : Microsoft MTA
HomeMtaServerId              : PRODMBX14

Select all Open in new window

…

I'll preface by saying, yes, I'm rolling out a new 2012 based Active Directory, but...

Our FSMO master died in a way that didn't want to be resurrected.

Originally I had, all Win 2003 SBS AD domain controllers, currently running win Windows 2000 native mode:

AD01 - Primary, FSMO master
AD02 - secondary DC
AD03 - Tertiary DC

AD01 died in a way where it was not salvageable.  

With AD02, I Seized the FSMO roles, and made it the new "master"

Now, replication between the two are broken. AD02 (new master) has the "DSA Now Writable" Dword (4) in it's registry.
AD03 was up a while when we were configing AD02, so the databases became out of sync.

Most all instructions I see say the only way to fix replication is to demote, remove from domain, rejoin, and promote the "bad" server, in this case, my Master (now AD02).

Currently, I made AD02 as the Master via seized roles from dead AD01.
AD03 is my only other DC, acting as secondary to now-master AD02.

Another method crossed my mind, and wanted to see if anyone has tried this...or, if anyone else has another way out, other than demoting my primary AD02.

What if I were to DCPROMO AD03 (a secondary DC which is not receiving replicated data), and remove it from the domain as as AD server, then re-join as a new secondary server?
Would this also clear the "DSA Not Writable" flag on AD02?
I do not care about the orphaned objects on AD03. If it would simply pick up exactly what my new master has, that would…

Hi, currently we have 2 AD forests with 2 way trusts. I am trying to retrieve all the name servers of Forest B from a DC in Forest A. I try to do this by running following command from DC in Forest A - nslookup -type=NS forestb.com

The command returns all 50 DNS servers in Forest A but only returns the IPs for half the servers. I expected the following results:

domain.com      nameserver = hostname1.domain.com
domain.com      nameserver = hostname2.domain.com
domain.com      nameserver = hostname3.domain.com
domain.com      nameserver = hostname4.domain.com
domain.com      nameserver = hostname5.domain.com
domain.com      nameserver = hostname6.domain.com

hostname1.domain.com           internet address = x.x.x.x
hostname2.domain.com           internet address = x.x.x.x
hostname3.domain.com           internet address = x.x.x.x
hostname4.domain.com           internet address = x.x.x.x
hostname5.domain.com           internet address = x.x.x.x
hostname6.domain.com           internet address = x.x.x.x

But instead the results are:

domain.com      nameserver = hostname1.domain.com
domain.com      nameserver = hostname2.domain.com
domain.com      nameserver = hostname3.domain.com
domain.com      nameserver = hostname4.domain.com
domain.com      nameserver = hostname5.domain.com
domain.com      nameserver = hostname6.domain.com

hostname1.domain.com           internet address = x.x.x.x
hostname2.domain.com           internet address = x.x.x.x
…