Posts

Showing posts with the label AD Object

E15 CU3–Update Failed–AD replicated Exceeded the tombstone lifetime.

Image
  Exchange 2013 CU3 The naming context is in the process of being removed or is not replicated http://technet.microsoft.com/en-us/library/replication-error-8452-the-naming-context-is-in-the-process-of-being-removed-or-is-not-replicated-from-the-specified-server(v=ws.10).aspx   C:\> REPADMIN /SHOWREPS Root\RDC01 DSA Options: IS_GC Site Options: (none) DSA object GUID: f1694974-47c4-4555-a214-db3c86854aeb DSA invocationID: f1694974-47c4-4555-a214-db3c86854aeb ==== INBOUND NEIGHBORS ====================================== CN=Schema,CN=Configuration,DC=lab7,DC=root     TW\AD02 via RPC         DSA object GUID: bfcc1053-e1da-46fd-8b9d-179c7992...

E14 PowerShell - Bulk Modify AD Attributes via Import CSV – Part1

Image
  http://help.outlook.com/zh-tw/140/dd251224.aspx 1. Export CSV from Source Domain C:\Batch> csvde -f c:\Batch\aliax.csv -d OU=BI40,OU=System_Accounts,OU=TestLaber,DC=TestLab,DC=corp,DC=com -r (mailnickname=*) -l mailnickname,proxyaddresses,sAMAAccountname -p subtree C:\Batch> csvde -f c:\Batch\aliax.csv -d OU=BI40,OU=System_Accounts,OU=TestLaber,DC=TestLab,DC=corp,DC=com -r (mailnickname=*) -p subtree   2. Modify CSV for Import   3. Read MailNickName and import to PhysicalOfficeLocation before MailEnable 3.1 Get-User –Filter [PS] C:\>Get-User -Filter {samaccountname -eq "FlowerOnline"} Name                                                        Recipie...

Server 2008 - SETSPN duplicated (UM voice mail drops)

Image
    How to use SPNs when you configure Web applications that are hosted on Internet Information Services UM Temporary authentication failure Validate SPN mappings using Windows PowerShell Exchange 2010 UM calls to voicemail drops   search for duplicate SPNs c:\>setspn -X Checking domain DC=msft,DC=com,DC=tw Processing entry 0 SmtpSvc/TWmsftEX01 is registered on these accounts:         CN=Administrator,CN=Users,DC=msft,DC=com,DC=tw         CN=TWmsftEX01,CN=Computers,DC=msft,DC=com,DC=tw SmtpSvc/TWmsftEX01.msft.com.tw is registered on these accounts:         CN=Administrator,CN=Users,DC=msft,DC=com,DC=tw         CN=TWmsftEX01,CN=Computers,DC=msft,DC=com,DC=tw found 2 groups of duplicate SPNs. c:\> setspn -D smtpsvc/twmsftex01.msft.com.tw twmsftex01 Unregistering S...

Ticket: Exchange 2010 mailbox account self permission

Image
    Correct self permission incorrect self permission

Replmon

1. Replmon /snyall /e /P 2. Suppress Link State Update - on BHS, when E2010 online 3. Outlook 2003 - OAB, F/B store on MBS/Public Folder, need replica from E2K3 PB     Outlook 2007 - OAB, F/B store on CAS   

REF: AD 群組 & Join Domain

Image
  Administrators 此群組的成員可以完全控制此網域中的所有網域容器。根據預設值,Domain Admins 和 Enterprise Admins 群組都是 Administrators 群組的成員。Administrators 帳戶也是預設成員。因為此群組在網域中有完全控制的權利,所以請在新增使用者時謹慎。 從網路存取此電腦;調整處理程序的記憶體配額;備份檔案及目錄;略過周遊檢查;變更系統時間;建立分頁檔;偵錯程式;為委派啟用要信任的電腦及使用者帳戶;從遠端系統強制關機;增加排程優先權;載入及卸載裝置驅動程式;允許本機登入;管理稽核及安全性記錄檔;修改韌體環境值;設定單一處理程序;設定系統效能;從連接站移除電腦;還原檔案及目錄;關閉系統;取得檔案或其他物件的擁有權。 Domain Admins 此群組的成員可以完全控制網域。根據預設值,所有網域控制站、所有網域工作站及所有網域成員伺服器併入網域時,此群組是所有網域控制站、所有網域工作站及所有網域成員伺服器的 Administrators 群組成員。Administrator 帳戶預設會是此群組的成員。因為群組在網域中有完全控制的權利,所以請在新增使用者時謹慎。 從網路存取此電腦;調整處理程序的記憶體配額;備份檔案及目錄;略過周遊檢查;變更系統時間;建立分頁檔;偵錯程式;為委派啟用要信任的電腦及使用者帳戶;從遠端系統強制關機;增加排程優先權;載入及卸載裝置驅動程式;允許本機登入;管理稽核及安全性記錄檔;修改韌體環境值;設定單一處理程序;設定系統效能;從連接站移除電腦;還原檔案及目錄;關閉系統;取得檔案或其他物件的擁有權。 Enterprise Admins (僅出現在樹系根網域) 此群組的成員可以完全控制樹系中的所有網域。根據預設值,此群組是樹系中所有網域控制站上的 Adminis...

Ticket: Exchange IS mailbox with error 0x50c (Get-Mailbox)

Image
  1. 做完DialTone Recovery 的mailbox 無法存取, 非整體現象 Event Type:    Error Event Source:    MSExchangeIS Mailbox Store Event Category:    General Event ID:    1205 Date:        11/11/2009 Time:        8:37:29 AM User:        N/A Computer:    BQT-MB07 Description: Failed to create the mailbox of /o=MSFT/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=IMSS.Quar with error 0x50c. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp . Data: 0000: 5b 44 49 41 47 5f 43 54   [DIAG_CT 0008: 58 5d 00 00 6e 00 00 00   X]..n... 0010: ff 78 18 00 00 00 00 00   ÿx...... 0018: 00 02 60 00 00 00 3a 67   ..`...:g 0020: f0 1f fe 00 00 00 03 59   ð.þ....Y 0028: 20 ...

Issue: ProhibitSendQuota policy not work – Get-MailboxStatistics

Image
  Get-Mailbox Get-MailboxStatistics 1. 用PowerShell Get-Mailbox 來檢視E2K3 mailbox 的資訊, 發現奇怪的狀況 Name                      Alias                ServerName       ProhibitSendQuota ----                      -----                ----------       --------------- A    AAA.Wu                 AAA Wu                bqp-msv12        unlimited   ...

Ticket: Get-mailuser ?

Image
  ORG 中只有這一筆mail user !! [PS] C:\Windows\system32>get-mailuser Name                                     RecipientType ----                                     ------------- OCS.Admin                                MailUser [PS] C:\Documents and Settings\Exchadm\Desktop>get-mailuser | fl   Only generated email address without mailbox Mail account attributes Mail User attributes OCS Mail user ...