Missing Free/Busy information

The solution to this problem is fairly simple, as long as the person is comfortable with ADSIEDIT.MSC. It takes some time to work with this toll to make the changes within the NTDS.DIT database, and needs attention since deleting the whole org would be very easy to achieve, so please be very careful when you get there.

 

Problem:

Users are not able to see others Free/Busy information, Group colander is no longer functioning

History:

The Client went through a migration from Exchange 2000 and Exchange 2003. Prior to migration all free/Busy information seems to be working fine, after the migration Client releases the group calendar, is no longer functioning.

Solution:

The attribute "SiteFolderServer" has the old Server name, and this information need to be updated to a new server follow the article span>284200

You will need ADSIEDIT.MSC installed on the server

The attribute "SiteFolderServer" is located

• Configuration Container [Computer.Domain.Com]
  
• CN=Configuration, DC=(YourDomainController),DC=com
  
• CN=Services
  
• CN=Microsoft Exchange
  
• CN=(YourOrganization)
  
• CN=Administrative Groups
  
• CN=(YourAdministrativeGroup)
  

Locate the attribute make sure the name of the server is NOT matching to a current server

Now you need to place the valid Value

Go to

• Configuration Container [Computer.Domain.Com]
  
• CN=Configuration, DC=(YourDomainController),DC=com
  
• CN=Services
  
• CN=Microsoft Exchange
  
• CN=(YourOrganization)
  
• CN=Administrative Groups
  
• CN=(YourAdministrativeGroup)
  
• CN=(Servers)
  
• CN=(YourServer)
  
• CN=InformationStore
  
• CN=First Storage Group
  

Go to property locate the
distinguishedName, copy it and paste it into , SiteFolderServer properties

Exit out from ADSIEDIT.MSC

 

Best Regards

Oz ozugurlu

Changes to the distribution list membership could not be saved. You do not have sufficient permissions to perform this operation on this object

Problem:

Cannot modify Universal Distribution group membership

Environment:

Empty root domain, Child Doman A, Child Domain B. The Universal DLs are created in Child Domain A and the owner of these DL's are residing in Child domain B.

Problem:

When the owner of DL's Tries to modify the membership list following error is appears

Changes to the distribution list membership could not be saved. You do not have sufficient permissions to perform this operation on this object.

Explanation:

This behavior can occur if you have a user group in one Active Directory domain and a distribution group in another domain. Each domain has its own global catalog. When a user tries to manage DL membership by using Microsoft Outlook Address Book, the user who has the permission to manage the DL receives the "do not have sufficient permissions" error message.

A global catalog contains a subset of all objects in the forest; it is only writable for the objects from its own domain. All Outlook requests are processed on the global catalog server of the user's domain. A user can only manage distribution groups that are in the user's domain, because the user's global catalog has a read-only copy of other objects.

Resolution:

To resolve this behavior, you can use the AutoDL tool to manage DLs. This tool is located on the Exchange 2000 Resource Kit CD-ROM. Alternatively; you can assign the DL and user group in the same domain

http://www.microsoft.com/exchange/downloads/2000/AutoDL.asp

We have decide to leave the groups intact and update the group's membership manually using account residing on Child domain A, since the Dl is mapping some inhouse applications

 

Best

Oz ozugurlu

 

Some More Questions about AD & Exchange

I have decided post some more some basic Exchange questions on my blog and share with all my students and friends.I have been interviewing people for where I work since last couple of weeks. Most of the positions are for senior Windows administrator and Senior Exchange administrator positions located in Washington DC.I have to be honest, I am surprised to know most people seem not to know even basic stuff related to Active Directory and Exchange server, mostly Exchange 2003.

Normally interview starts with another classic question,

• Where do you see yourself, your skill set in Active Directory 2003 environment?
  
• If you have to rate your own skill from 1 to 10 what score would you think you would give it to yourself?
  

I have been hearing people rating themselves as minimum 8 in Active directory and 8 to 9 on exchange 2000 and 2003.Honestly it is always exciting to hear these high scores , however I understood quickly , most people has very little knowledge in general but very generous in rating themselves. Here is my golden advice to those who is missing Active Directory basic knowledge. Go to link below Active Directory Inside Out (Michael Murphy) And watch and listen all webcast series at least three times, I think Murphy is one of the best ever,

I have enjoyed every single webcast series he has done, incredible web cast library, great and smooth teaching technique. What more to say could say , he is terrific and passing his knowledge to all of us .

Most of my questions on the real life oriented and come out of same concept as the active directory webcast series

Here is some advice,

When someone ask precise questions, give short answer back

For instance, I often find myself asking to a person who has 8 years Active Directory experience

• Question: What is active directory?
  
• The answer should be as follows
  
• Answer: It is a database
  
• What is Domain? The answer should be
  
• Answer: Boundary of authentication, Boundary of DNS name space (watch or Listen Michael Murphy)
  

I often see people in front of me spending, at least 6 minutes to explain what an active directory is, and not getting a solid answer.

I see people are not being able to tell me the difference between HUB and Switch, or spending more than 5 minutes to explain

• Check this one out; when I was interviewing a person I have asked, what is the difference between Hub and Switch? Person response follows as below.
  
• Hub is slow, switch is fast. I said great, if I give you a hub 100Meg/sec and give you a switch 100Meg/sec
  
• What is the difference now?
  
• Person said you can configure switch for internet. It is okay not to know, it is not okay not to pay attention and learn basic stuff .
  
• What is an IP address
  
• What is Subnet Mask?
  
• What is primary function of subnet mask?
  
• IP address class range
  
• Private IP range
  
• What is Active Directory?
  
• What is Domain?
  
• Difference domain controller and Stand alone server
  
• I love this answer, Stand alone sits by itself , I am sure he is very lonely (-:
  
• How to install Active directory
  
• Here is the hard one, where AD database gets installed by default
  
• What is the name of the database ( here is my thinking, if a person telling me , he or she has 10 years AD experience, and has not idea about NTDS folder, or Ntds.DIT database, I assume that person has never done, DCPromo, or slept the all times, Either way the person it not qualified in my eyes.
  

  
   

  Let's move on
  

  
   

• What is Schema?
  
• What is an attribute?
  
• How many partitions in AD 2000 database?
  
• How many partitions in AD 2003 Database (I told you watch Michael Murphy)
  
• Here is the link again
  
• Active Directory Inside Out (Michael Murphy)
  
• http://www.microsoft.com/events/series/adaug.mspx
  
• Operation masters? FSMO Roles
  
• Pay attention to PDC emulator, Michael won't mention a lot on Active Directory Inside Out (Michael Murphy); believe it is on 4th one.
  
• Name FSMO roles, why we need them
  
• How may Frost wide
  
• How many of them Domain Wide
  
• If you have 12 domains how may FSMO roles do you will have in your Forest (38 Roles)
  
• 
   

  More questions
  

  
   

• Now Exchange
  
• Versions Exchange 2003
  
• How many databases each version support?
  
• Where are log files located?
  
• Installing exchange, what is prerequisite
  
• Why or why not you install exchange on Domain controller?
  
• How can you convert a server into Domain controller, where exchange is running on top? )-: Tricky one
  
• Can you rename Exchange server? Why or Why not?
  
• what is different online and offline defragmentation
  
• what is Eseutil
  
• what is Isinteg?
  
• What is the difference speaking of ISinteg and EseUtil ?
  
• Now here is the hard one
  
• What is online defragmentation (when does this happen by default)
  
• What is offline defragmentation
  
• What event log shows up on the Exchange servers, shows available white space (1221)
  

To be honest if a person can hang in so far, he or she very well deserve the position in my opinion

 

Best

Oz ozugurlu

Receive mails on Disabled User Account

We have user left the company we need continue to receive e-mails for this user since she was part of our sales team. Our security team wants account not to be used, how we can make everyone happy.

Open ADUC

Locate the account

• Reset the password to anything ( incase if someone enables it at least password is changed), make sure to filter all event logs from Domain controllers
  
• Disable the account
  
• Go to Exchange advance
  
• Mailbox rights
  
• Locate "Self" and make sure
  
• Full mailbox permissions and Associated external account is Enabled
  
• Hide the account from GAL
  

Now security is happy account is disabled, your boss is happy, account still getting mails sent to this account, direct the mails to someone else if you like.

Do not turn this attribute for enable account you might have weird issues if you do it.

The External Associated Account attribute is only associated with a disabled user account in the Exchange Resource Forest and this disabled User Account is associated with a User Account in the Active Directory Account Forest

Read more

Best

Oz Ozugurlu