Tag Info

Hot answers tagged

7

Does what i am doing above make sense as LDAP connectivity check Running this every 2 seconds is overkill. It's too much. If you're going to do this, consider lengthening the interval to only checking once every 5 minutes or so. LDAP servers are not so prone to crashing that you need to check them every 2 seconds. Does the above code confirm that ...


7

I don't think you need to actually install Exchange to accomplish this. What they're referring to is extending the AD Schema for Exchange, which adds the Exchange related Schema data to AD. I don't necessarily see this as particularly risky. Here's a link to details on how to extend the Schema for Exchange Server 2013: ...


6

Q: is there another way to do this? A: Do yourself a favor and backup his old data and then delete his profile and redirected folders. Then allow Windows to create his user profile and redirected folders on first login. Then restore the data to the new redirected folders. Currently you're dealing with two different security entities (SID's) even though the ...


4

What Microsoft said is right: the sync process is one-way, and some (well, a lot of) settings can not be managed by Office 365 in your scenario: they need to be configured on your local AD and then synced; however, your environment lacks any Exchange deployment, so those attributes don't even exist in your AD objects. As joeqwerty said, extending the AD ...


3

That's not how it works - the 'user must change password at next login' flag 0s out the pwdLastSet attribute, so that the user is forced to change at next login. When this happens, there's no timestamp, so the minimum age requirement is always considered to be met. You can test this by changing your own password, then (without logging out) checking the ...


3

Yes it is. Your internal DNS server will be authoritative for ad.foo.com. Your external DNS server(s) will be authoritative for foo.com.


2

You don't give out too many useful information about what Operating System you are using, but these procedures will be similar for Vista/7/8/8.1: To find out what groups you are a member of: Log on to your virtual machine (assuming it is joined to the domain) with your AD user account Open up a Command Prompt Type in whoami /groups and hit enter The ...


1

This is a list of useful attributes available on user objects in Active Directory. You're going to want to populate the TelephoneNumber attribute. DirSync or Azure AD Sync will synchronize this to the GAL in your Office 365 tenant.


1

I found that we'd get this error where a mailbox had been moved to another database (leaving a soft deleted mailbox in the the database) and then the moved mailbox had also been disabled. The guid given couldn't be found using get-mailbox (becasue the mailbox has been disabled) but both the disabled and the soft-deleted mailboxes could be found using ...


1

Without more details this is difficult to answer. There are myriad ways to connect to an LDAP server. Validate that the connection URI is correct for the platform that you're using. Also, if you believe a firewall issue to be at fault, check this port list against your open ports. Active Directory and Active Directory Domain Services Port Requirements



Only top voted, non community-wiki answers of a minimum length are eligible