Posts

LAB: Bulk Enable-UMMailbox

Image
  重點是 PowerShell 的foreach, 不過UM 的UI 也太簡單了. 無法批次啟用及設定, 一定要MIS 跳進來學及推廣 PowerShell.   [PS] C:\> get-user -identity imss.quar | foreach { $_.samaccountname + ',' + $_.p hone.substring($_.phone.length - 3) } >> c:\userlist.csv [PS] C:\> import-csv c:\userlist.csv | foreach { enable-ummailbox -id $_.samaccou ntname -ummailboxpolicy MSFTPool -extensions $_.extension -pin $_.extension } [PS] C:\Documents and Settings\Exchadm\Desktop> Import-Csv c:\userlist.csv | fore ach { enable-ummailbox -id $_.samaccountname -ummailboxpolicy BenQPool -extensio ns $_.extension -pin $_.extension } Get-User -Filter "Title -like '*Manager'"     [PS] C:\Documents and Settings\Exchadm\Desktop>Get-Mailbox -Server bqt-mb07 | ft -Property,SamAccountName,umenabled,extensions -Property           SamAccountName           ...

Issue: E14 Cannot create new mailbox

Image
    (PID 11000, Thread 13) Task Enable-Mailbox writing error when processing record of index 0. Error: Microsoft.Exchange.Data.Directory.ADOperationException: Active Directory operation failed on DC12.msft.corp.com. This error is not retriable. Additional information: 存取權限不足,無法執行操作。. Active directory response: 00002098: SecErr: DSID-03150E8A, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 ---> System.DirectoryServices.Protocols.DirectoryOperationException: 使用者的存取權限不足。    於 System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut)    於 System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout)    於 Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(DirectoryRequest request, LdapOperation ldapOperation, IAccountingObje...

LAB: E14 Mailbox Role – Importing and Exporting Mailbox Data

Image
        Blog Extended Reading More Information & Reference 1. Understanding Importing and Exporting Mailbox Data 2.

REF: E14 Mailbox Role – Part 5 - Importing and Exporting Mailbox Data

Image
  Importing and Exporting Mailbox Data E2K7 開始提供的功能   Mailboxes can be exported to another target mailbox or to a .pst file. There are a few reasons why you might want to import or export mailbox data: Remove one or more messages from mailboxes    If a sensitive message was inadvertently sent to incorrect recipients, the export mailbox process can be used to remove those messages from the specified mailboxes. Compliance requirements    The export mailbox process can be used to export the contents of mailboxes for legal discovery and import them into a special mailbox used for compliance purposes. Create a point in time mailbox snapshot    You might want to create a snapshot for certain mailboxes without the need to retain the entire backup set for a mailbox database. By default, Exchange exports and imports all empty folders, special folders, and subfolders to the target location. To specify folders to either include in o...

REF: E14 Mailbox Role – Part 4 - Mailbox Store

Image
  這篇比較偏基礎計算機概論的如資料結構, B-Tree 等的內容就略過.   Exchange 2010 Standard Edition supports five databases . Exchange 2010 Enterprise Edition supports 100 databases . Logical Components of the Exchange Store 略 File Structure of the Exchange Store 略 Understanding Transaction Logging To view the decimal sequence number for a specific log file, you can examine its header by using the Exchange Server Database Utilities (Eseutil.exe) tool. The first 4-KB page of each log file contains header information that describes and identifies the log file and the databases it belongs to. The command Eseutil /ml [log file name] displays the header information. If you have to repair a database, some data will be lost. Data loss is frequently minimal; however, it may be catastrophic. After running Eseutil /p on a database, you should completely repair the database with the following two operations: First, run Eseutil/d to defragment the database. This operation discards a...

REF: E14 Mailbox Role – Part 3 – E-Mail Address Policies

Image
  1. Update-EmailAddressPolicy   環境中不適合直接run 這個command, 除非重新調整過email address policy. 2. 舊版的email address policy 將無法直接編輯   3. 新版(2007 開始) 的好處是透過GUI 直接選定AD object, 取代過往的LDAP query (&(&(&(&(|(&(objectCategory=person)(objectSid=*)(!samAccountType:1.2.840.113556.1.4.804:=3))(&(objectCategory=person)(!objectSid=*))(&(objectCategory=group)(groupType:1.2.840.113556.1.4.804:=14)))(& (mailnickname=*) (| (&(objectCategory=person)(objectClass=user)(|(homeMDB=*)(msExchHomeServerName=*))) )))(objectCategory=user)(company=msft*)))) 只是不知 Mail group 只套用leagacyExchangeDN 的問題是否有解決?     Exchange applies a policy to all recipients that match the recipient filtering criteria: The recipient policy functionality is divided into two features: e-mail address policies and accepted domains. A detailed discussion about accepted domains is outside the scope of this topic. For information ab...

REF: Exchange 07 & 10 PowerShell for CAS – Get-CASMailbox

Image
這個覺得蠻重要的, 一般會用get-mailbox –identity 取得user 資訊, 不過CAS 存取的相關資訊就得換個思考及取得方式如下 Get-CASMailbox [PS] C:\Documents and Settings\Exchadm\Desktop> Get-CASMailbox -Identity johnny.y ao | fl EmailAddresses                        : {EUM:Johnny.Yao@msft.com} LegacyExchangeDN                      : /O=msft/OU=BQY/cn=Recipients/cn=Johnny.Yao LinkedMasterAccount                   : PrimarySmtpAddress                    : Johnny.Yao@msft.com ProtocolSettings                   ...