I'm looking for an Exchange 2010 command that would do the following:
This would be very helpful for me to check my migration and make sure all of our aliases were moved correctly.
When connecting android mobile devices to Exchange ActiveSync some require granting device administrator privileges which permit an exchange administrator to remotely wipe the phone. The warning messages are scaring some mobile users and turning them away from using Exchange ActiveSync altogether.
How can I disable his functionality on Exchange Server 2010? [security breaches are not an issue here]
Throughout my career, I've encountered quite a few users who were email hoarders...
I'm managing a 100-user environment where users previously had 100mb quotas and a basic Cyrus IMAP/Postfix solution. That led to lots of locally-stored mail and the related problems with data-retention and lost mail following PC failures.
I promptly moved towards Exchange 2010 with MailArchiva (for discovery/archiving) and have been humming along for nearly a year in this setup. Everything inbound and out is archived and retained for compliance purposes. I initially set 3GB mailbox limits per user. A handful of users needed extra space for their working sets of email and were able to justify it, so I've made some exceptions. However, I have one particularly-bad (but important) user whose Inbox is presently 22,000 items, of which 14,000 are unread. It's probably not the number of messages, but the nature of the email; lots of reports, statements and large PDF attachments. This is also a Blackberry user, so I suspect that they read mail selectively, based on subject. The user has hit the 3GB limit for the first time and is unwilling to prune the mailbox. I took care of their 3,000 deleted items to keep mail flowing, but am at a loss on how to educate users on how to organize their email. I can institute stringent policies and be a hardass, or I could sit with the user and help sort and purge mail. Either way, it doesn't address the real issue of how to help with education.
Does anyone here have any tips on how to deal with this type of situation? I'd like some example guidelines. If you're using policies in your firm, what types of policies help keep people under control?
I find that people use mail differently, but it's a challenge to force them into a particular way of organization. I may not even be the best example, but I also know what to keep and what to delete.
Update - The first battle is over, in that I've been able to keep the user under the Exchange mailbox limit by some reasonable pruning. However, I went to rebuild the user's computer and discovered a 17GB local PST file with just over 6,500 subfolders! The user had been copying (not moving) messages into an array of subfolders; sometimes with single messages being copied/filed into multiple folders. Underscores (_) and prefixes (a-z) were used to control the display order of the folders within the file! The user had also been CC'ing themselves on outbound email so as to have an Inbox record of messages to later be filed into one of the local PST's subfolders. This is an absolute misuse of the technology and is a scary way to organize company data. I am handing it over to the owners to address the situation, as it's now a company liability.
I have one Exchange 2010 server which is fully updated, the clients are running Outlook 2010 but some users are getting a prompt for credentials every time they open Outlook.
I have checked for common errors like the checked box Always request authentication.
I think this happens only with new users that are created in AD and in Exchange and I can't do gpupdate - could that be related?
I'm trying to give 'send-as' permissions to one user in Exchange 2010. Here is the Powershell command I'm running:
Add-ADPermission "User1" -User "Ourdomain\User2" -Extendedrights "Send As"
Powershell returns this error:
Active Directory operation failed on DC.OurDomain.pri. This error is not retriable. Additional information: Access is denied. Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 + CategoryInfo : WriteError: (0:Int32) [Add-ADPermission], ADOperationException + FullyQualifiedErrorId : EDBB94A3,Microsoft.Exchange.Management.RecipientTasks.AddADPermission
I've tried multiple alternatives to the Powershell command - ie. using -Identity etc., but that and the EMC wizard all return the same error.
I'm not sure if the "INSUFF_ACCESS_RIGHTS" is referring to me who is running the command or the user I'm giving the send-as rights to?
I've been following the Microsoft Technet "Manage Send As Permissions for a Mailbox" web page here: http://technet.microsoft.com/en-us/library/bb676368.aspx
So have added the two permissions you need to do this:
Organization Management
Recipient Management
But that is not helping. Any ideas?
If I do the following:
That works, if I close ADUaC and open it up again and re-check those new permissions they are still there. If I return about 10 minutes later those permissions are now gone - user2 does not show up in the security permissions of user1 at all.
Don't think I've ever seen this kind of AD behaviour before.