Home / server / Questions / 269048
Accepted
Rod
Asked: 2011-05-13 06:30:59 +0800 CST

Entering people's email addresses in AD attribute

  • 772

We have a Windows 2003 Server Active Directory environment. In AD you can enter a person's email address. Back when we used to have Exchange, when creating a new user it would also create an entry in Exchange. We have not had Exchange in years, but when creating accounts, or modifying their profile in AD, I've left the email address portion blank, because I wasn't sure what would happen. Now I'd like to know, can we create an account or modify an existing account, and also add their email address, even if it isn't a part of our domain? (Such as when they have a Hotmail or Gmail account.)

windows exchange active-directory

3 Answers

  1. Best Answer

    A user's mail attribute does not need to contain an address within the Active Directory domain. In fact, there is not input validation on the field -- you may enter a string which is not a valid email address.

    • 9

  2. If you don't have Exchange or any other AD-integrated mail system, that attribute is effectively unused; it can be used to store information, like the user's actual email address, but nothing will make any use of it and you will be able to see what it contains only by doing an AD query.

    So, yes, you can safely store the user's email address in there; but it will not be available to, say, the Outlook address book, because there is nothing server-side actually using it; it will only be useful if you open the ADUC console (or any other tool which queries AD) and look for it.

    By the way, even if you had Exchange, that attribute is only written by Exchange, never read (Exchange stores the user's actual addresses in a completely different place); so Exchange will initially put there the user's primary e-mail address, but you can overwrite it with anything you want, without any consequence at all.

    • 8

  3. I was doing a research on this mail attribute in regards to Azure AD synchronisation and I have a slightly different finding which I would like to share here.

    1) In an AD Exchange 2010 environment, the mail attribute is used by Outlook as the email address to send to.
    2) It appears in the E-mail address column of Global Address List.
    3) Yes, you can change the mail attribute to anything you like. ADUC does not even check if it is a legitimate SMTP address.
    4) However, if you happen to change the primary SMTP address of a certain mailbox, Exchange will then update the mail attribute of the corresponding account with the new primary SMTP address.

    • 2