Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I work in an organization that is prone to frequently renaming teams.

What is the best way to manage name changes to mail-enabled security groups? So far, I have just been using the ADUC GUI on our Exchange Server. I rename the group name then open properties and fix the various Exchange related attributes.

Should I be scripting this for efficiency and accuracy? Should I be concerned about deleting old smtp addresses? Should I be taking steps to prevent client cached GAL names and addresses?


share|improve this question
up vote 3 down vote accepted

For 2003, I don't believe the scripting interfaces are all that convenient to use. They are for 2007 and 2010, but not 03. The methods you're using match what we were doing when we did renames. We tried to prevent them where possible, but sometimes... you just have to do it.

  • Rename the various AD names in ADUC
  • Rename the various Exchange names in ADUC+plugins
  • Preserve the old SMTP addresses for backwards compatibility (this can cause problems later on down the road from name-collisions, but at least mail doesn't bounce)
  • Preserve the old X500 addresses for backwards compatibility

The x500 addresses are more important that people realize since that's how Exchange stores addresses internally.

share|improve this answer
Thanks, we have x.400 addresses (I gather as legacy from Exchange 5.5?) and I don't see new ones created when I change any of the Exchange attributes. – zen Jul 21 '11 at 20:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.