I have just posted this article in the Greatest Hits series on the ILM Technet forum.
http://social.technet.microsoft.com/Forums/en-US/identitylifecyclemanager/thread/f8ad045d-7252-4cd1-a189-d704a8f99129
The article covers various management tasks you can acheive with the standard AD MA, including provisioning and updating of users, mailboxes, contacts and distribution groups. There are quite a few code samples as well.
Quite unexpectedly this week, I got to genuinely use SCR “in anger” when I killed a client’s production Exchange 2007 server by attempting to install SP2 on it (for that whole sorry story see http://social.technet.microsoft.com/Forums/en/exchangesoftwareupdate/thread/713d2b17-f19d-4eaf-8146-c51f59942d08?prof=required). I’ll keep my swearing about SP2 off the page here and focus on the hero of the week – which was SCR!
I just got this error while attempting to provision Exchange 2007 users with ILM 2007 FP1:
Event Type: Error
Event Source: MIIServer
Event Category: Server
Event ID: 6801
Date: 15.09.2009
Time: 10:14:02
User: N/A
Computer: ILMSERVER
Description:
The extensible extension returned an unsupported error in MIIS.
The stack trace is:
“Microsoft.MetadirectoryServices.ExtensionException:
**** ERROR ****
ExternalEmailAddress is mandatory on MailUser.
**** END ERROR ****
**** ERROR ****
The mail [...]
I’ve been doing a bit of work with SCR lately, the point being to achieve a “poor man’s failover” for the mailbox server role. Not everyone needs the immediacy, or the expense, of a cluster, and SCR was a welcome addition to the redundacy capabilities of Exchange 2007 – but I couldn’t find a complete [...]
Just a quick post about this technote: http://technet.microsoft.com/en-us/library/cc671176.aspx
It claims this bug was fixed in rollup 4, but after struggling with a server with rollup 7 installed for many hours today, I can confirm that this bug is not fixed, and you do need to follow the procedure in the technote.
The bug concerns Outlook [...]
A while back I proposed a powershell XMA approach to the problem of adding Exchange 2007 mailboxes to existing AD users. This was because my old method of adding an Exchange 2003 mailbox by populating a couple of extra attributes did not seem to work with Exchange 2007.
However, in a recent thread on the Technet [...]
This post builds on yesterday’s which should be read first. Following are the extra Sync Rule and MA configurations that I made which added the Exchange 2007 support.
This is a follow-up to the post about renaming a domain with Exchange 2007, which you actually can’t do as it turns out, so this became a migration to a new forest.
I was mostly working on the mailbox migration, so this post only covers Exchange 2007 to 2007 cross-forest migration.
Here’s an unpleasant little fact you only find out if you need to: while you could rename a domain that hosted Exchange 2003, this functionality has been removed with Exchange 2007.
Hmm. So what if you need to? Well a customer is insisting that it must be done, so I’ve had to do some investigations.
Still on Exchange migrations here, and after wasting half today on a very strange certificate problem, here’s the solution I eventually found.
