Forum Discussion

Mark_Prior20's avatar
Mark_Prior20
Level 3
11 years ago

Automatic & Selective Enabling of User Accts

Hi I need to be able to either Enable a user for archiving with a powershell Script (we have archiving tasks / mailboxes over two mail servers) Use a AD attribute (preferable a cumstom one) that ...
Backing Up
Best Practice
Configuring
Enterprise Vault
Information Governance
Monitoring
Reporting
Rules
Tip-How to
Troubleshooting
  • JesusWept3's avatar
    JesusWept3
    11 years ago

    if you are going to use a custom AD attribute in AD then you can use an LDAP query in your Provisioning Group...

    So you could do the following
     

    1. Open the Vault Admin Console
    2. Expand out Directory on Server -> SiteName -> Targets -> Exchange -> YourDomain -> Exchange Server
    3. Click Provisioning Group
    4. Right click New -> Provisioning Group
    5. Press Next
    6. Give a name to the provisioning group like "EV Users" and press Next
    7. Press the Add Button
    8. Choose "LDAP Query" and press OK
    9. Give the Display NAme a description like "EV Users (Attribute 6)"
    10. The query root should be filled out already 
        should be something like GC://gcServer.myDomain.com/DC=myDomain,DC=com
    11. In the query type the following to enable based on Custom Attribute 6 in AD: 
        (&((extensionattribute6=EnableEV)))
    12. Press OK and then follow the prompts through to the End
     
    Make sure that "Archive Mailboxes in this provisioning group is checked"
    Make sure that on the Archiving Defaults that "Automatically enable mailboxes" is checked
     
    and thats all you really need to do, run provisioning making sure that the group is appropriately placed
    The enablements will occur when the archiving task kicks off so you dont have to manually enable anyone
     
EdLacey's avatar
EdLacey
Level 5
11 years ago

If you AD design is consistent and segregates special/service accounts from ordinary user accounts then you can create a provisioning group and target specific OU's or create a specific AD Group and target that so your service desk can simply add accounts to be archived. Alternatively apply a custome attribute to accounts you want to archive and create a provisioning group with an LDAP query