Active Directory

memberOf Attribute can now be used in OPATH filters!

I’ve blogged about OPATH filters before [read previous post “Adventures with OPATH: some annoyances if you’re used to LDAP“], and one of the annoyances was the the fact that it wasn’t possible to use the memberOf attribute to pick up (or exclude) members of certain groups from all the stuff that uses OPATH filters such […]

More →

Offline Address Book: Mystery of The Missing Recipients

Frequently users report recipients missing from the GAL. So begins the mystery of missing recipients. These are existing users, not new ones. New users don’t show up in the GAL for clients using Outlook 2003 Cached Mode clients, because Outlook uses an Offline Address List (aka “Offline Address Book” or OAB), which is generated once […]

More →

HOW TO: Add a Query-Based Distribution Group to a (non-Query-based/”normal”) Distribution Group

If you try to add a Query-based Distribution Group to a non-Query-based/”normal” Distribution Group by going to group’s properties | Member tab | Add – the UI doesn’t list any Query-based Distribution Groups. One workaround I suggested recently is to add the distinguishedName of the Query-based Distribution Group to the member attribute of the normal […]

More →

Adventures with OPATH filters in Exchange 2007 and some annoyances if you’re used to LDAP

If you’ve deployed or have been testing Exchange Server 2007, you must have certainly crossed paths with OPATH. OPATH is a querying language, somewhat similar to SQL. It is used to filter objects in PowerShell. OPATH filters replace the LDAP filters for EmailAddressPolicies (equivalent of Recipient Policies), Address Lists/GAL, and Dynamic Distribution Groups (aka “Query-Based […]

More →

Update – HOW TO: Find an email address in Active Directory

SKIP THIS POST and head over to Five and a half ways to find an email address in Microsoft Exchange and Active Directory, a comprehensive post that shows all the ways you can find an email address in Active Directory.  (OK, if you must really know, we merged content from this post with a previous […]

More →

Exchange Server 2007: Bulk creation of mailboxes using Exchange Management Shell

Bulk creation of mailboxes (and the accompanying user accounts) in Exchange Server 2003/2000 involved some elaborate scripting effort. This task can now be done fairly effortlessly, thanks to the Exchange Management Shell (EMS). The Shell can very easily import/use CSV files saved from a spreadsheet or text editor and create the mailbox-enabled users. Here’s how. […]

More →

SCRIPT: List Distribution Groups

I was able to modify this script I wrote a while back for general use. What it does: Lists mail-enabled groups in a domain including following attributes:– Group Name– Group type (Security/Distribution group)– Description (if the description field is populated)– Manager– Members What needs to be added…– If the group only receives from authorized senders […]

More →

Query-based Distribution Groups and Disabled Users

Another issue with Query-based Distribution Groups – when admins create these, typically using a GUI – there’s no obivious way of excluding disabled user accounts. Even if you enter the ldap filter manually using Custom Search, it’s easy to forget about excluding disabled users. End result: users sending mail to QBDGs complain about getting NDRs […]

More →

All Groups address list and Query-Based Distribution Groups

You create new Query-Based Distribution Groups but they don’t show up in the All Groups address list in Outlook clients – cached mode or not. QBDGs are not really groups, as far as Active Directory goes. They’re instantiated from a new class – msExchDynamicDistributionList. The default ldap filter for All Groups address list, stored in […]

More →

How to create a Recipient Policy based on Company names?

One of the more frequently asked questions in an environment where you want to host more than 1 company’s email on a single Exchange server. Both companies have unique dns domains, let’s say CompanyA.com and CompanyB.com. You typically end up locating thw users from the 2 (or more) companies in their own respective OUs. You […]

More →