{"id":356,"date":"2009-02-25T14:10:38","date_gmt":"2009-02-25T14:10:38","guid":{"rendered":"https:\/\/www.wapshere.com\/missmiis\/?p=356"},"modified":"2009-11-18T08:39:29","modified_gmt":"2009-11-18T08:39:29","slug":"ilm2-rc0-provisioning-exchange-2007-users","status":"publish","type":"post","link":"https:\/\/www.wapshere.com\/missmiis\/ilm2-rc0-provisioning-exchange-2007-users","title":{"rendered":"ILM2 RC0 – Provisioning Exchange 2007 Users"},"content":{"rendered":"

This post builds on yesterday’s<\/a>\u00c2\u00a0which should be read first<\/strong>.\u00c2\u00a0 Following are the extra\u00c2\u00a0Sync Rule and MA configurations that I made\u00c2\u00a0which added the Exchange 2007 support.
\n<\/p>\n

Workflow<\/h3>\n

I have changed yesterday’s Workflow a little so that it now uses “Based on attribute value” as the Action selection. This seems to give me more control over where the sync rule is applied.<\/p>\n

\"\"<\/p>\n

Synchronization Rule<\/h3>\n

The following table shows the configuration of my sync rule.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Destination<\/strong><\/td>\nSource<\/strong><\/td>\nInitial<\/strong><\/td>\nExistance<\/strong><\/td>\n<\/tr>\n
sAMAccountName<\/td>\naccountName<\/td>\n\u00c2\u00a0<\/td>\n\u00c2\u00a0<\/td>\n<\/tr>\n
userPrincipalName<\/td>\naccountName
\n+ “@mydomain.local”<\/td>\n		\u00c2\u00a0<\/td>\n\u00c2\u00a0<\/td>\n<\/tr>\n
givenName<\/td>\nfirstName<\/td>\n\u00c2\u00a0<\/td>\n\u00c2\u00a0<\/td>\n<\/tr>\n
sn<\/td>\nlastName<\/td>\n\u00c2\u00a0<\/td>\n\u00c2\u00a0<\/td>\n<\/tr>\n
department<\/td>\ndepartment<\/td>\n\u00c2\u00a0<\/td>\n\u00c2\u00a0<\/td>\n<\/tr>\n
displayName<\/td>\ndisplayName<\/td>\n\u00c2\u00a0<\/td>\n\u00c2\u00a0<\/td>\n<\/tr>\n
mailNickname<\/td>\nmailNickname<\/td>\n\u00c2\u00a0<\/td>\n\u00c2\u00a0<\/td>\n<\/tr>\n
dn<\/td>\n“CN=”
\n+ accountName
\n+ “,OU=Users,OU=MyOrg,dc=mydomain,dc=local”<\/td>\n		yes<\/td>\n\u00c2\u00a0<\/td>\n<\/tr>\n
employeeID<\/td>\nemployeeID<\/td>\nyes<\/td>\nyes<\/td>\n<\/tr>\n
unicodePwd<\/td>\n“Password01”<\/td>\nyes<\/td>\n\u00c2\u00a0<\/td>\n<\/tr>\n
userAccountControl<\/td>\n512<\/td>\nyes<\/td>\n\u00c2\u00a0<\/td>\n<\/tr>\n
homeMDB<\/td>\n“CN=”
\n+ mailDatabase
\n+ “,CN=”
\n+ mailStorageGroup
\n+ “,CN=InformationStore,CN=”
\n+ mailServer
\n+ “,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,
\nCN=Microsoft Exchange,CN=Services,CN=Configuration,DC=mydomain,DC=local”<\/td>\n		<\/strong>yes<\/td>\n\u00c2\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Note that I have used a number of custom attributes to construct the homeMDB. Apart from this being a more flexible approach, I actually got an “unexpected-error” in MIIS when I hard-coded the entire homeMDB string. For the RC0 documentation on modifying the schema see here<\/a>.<\/p>\n

MA Configuration<\/h3>\n

The configuration of the ILM MA is as I covered yesterday<\/a> – you just need to make sure you have all the import flow rules in place to get the necessary data into the metaverse – not forgetting the ExpectedRulesList.<\/p>\n

The AD MA should not need any classic flow rules, as you’ve configured everything you need in the Sychronization Rule object. You do need to tick “Enable Exchange 2007 provisioning” on the Extensions page.<\/p>\n

\"\"<\/p>\n

Exchange Management Tools<\/h3>\n

And, just like with ILM 2007, you need to have installed the Exchange Management Tools on the ILM server.<\/p>\n

Here’s one I prepared earlier<\/h3>\n

Here’s what a provisioned user looked like just prior to exporting him from the AD MA.<\/p>\n

\"\"<\/p>\n

Immediately after exporting I was able to login as this user, open Outlook, and send an email. Hooray!<\/p>\n

Another nice surprise: as I had gone through the Password Reset and Registration<\/a> configuration, and had already installed the ILM client on this workstation, the user was immediately prompted to register for password reset! Now that I do<\/em> like.<\/p>\n

\"\"<\/p>\n","protected":false},"excerpt":{"rendered":"

This post builds on yesterday’s\u00c2\u00a0which should be read first.\u00c2\u00a0 Following are the extra\u00c2\u00a0Sync Rule and MA configurations that I made\u00c2\u00a0which added the Exchange 2007 support.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":[]},"categories":[26,25],"tags":[],"class_list":["post-356","post","type-post","status-publish","format-standard","hentry","category-exchange2007","category-ilm-2"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pkp1o-5K","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts\/356","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/comments?post=356"}],"version-history":[{"count":17,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts\/356\/revisions"}],"predecessor-version":[{"id":601,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts\/356\/revisions\/601"}],"wp:attachment":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/media?parent=356"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/categories?post=356"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/tags?post=356"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}