Microsoft Online Services TechCenter >
Microsoft Online Services Forums
>
Microsoft Online: Exchange Online
>
Exchange Tabs/Fields not showing up in Active Directory Users and Computers
Exchange Tabs/Fields not showing up in Active Directory Users and Computers
- I am in process of migrating my email to Microsoft Online. I am currently using Lotus Notes and have no Exchange in my enviroment. In preparation for the migration I have extended my active directory using Exchange 2007 R2. I installed the Exchange 2007 Management tools and still can't see the Exchange Tabs/Fields in Active Directory Users and Computers. How can I get these tabs to show up in Active Directory Users and Computers.
Thanks,
All Replies
- With Exchange 2007 you no longer manage Exchange properties through active directory users and computers, you use the Exchange 2007 Management Console. If you really want those tabs to show up you'd have to install the Exchange 2003 tools. What attributes are you trying to set? You could use ADSIEdit or if you have Windows 2008, I know it has the attribute editor built into Active Directory Users and Computers.
I assume you're probably trying to set the email and proxyaddresses attributes on these users so they can be sychronized to Microsoft Online using directory sync. If that is the case, I have some scripts that could help. You can contact me via the website associated with my profile or email me directly, and I'll be happy to provide them to you.
Chad
Chad.Mosman[at]MessageOps[dot]com - Although that 'ship has already sailed' you do not need to extend the AD Schema for Exchange 2007 to migrate mail up to the BPOS cloud, even if you are using Quest's Notes Migrator for Exchange. The only requirement for having Exchange installed in your on-premise domain is to migrate and synchronize Distribution Lists from Notes using NME.
That said, the only attribute you need to stamp is the mail attribute, which is available as the Email Address field on the AD user's General tab. Unless you have many user accounts with multiple SMTP proxy Addresses then you'll need to either stamp the proxyAddresses attribute or just add the secondary SMTP address to the account in the BPOS Admin portal instead.
Take a look at these white papers which covers best practices for migrating from Notes to the BPOS cloud:
http://www.pointbridge.com/viewpoint/documents/articles/bpos_migration_wp.pdf
http://www.quest.com/documents/landing.aspx?id=9713
http://www.quest.com/documents/landing.aspx?id=9993
Jeff Schertz, PointBridge | MVP | MCITP: Enterprise Messaging | MCTS: OCS - One attribute I need to edit is the email enabled ID's, for example I and members of my team have 2 ID's in Active Directory 1 for production and 1 for testing. I don't want the testing ID to be sync'ed with Microsoft Online during the Dirsync. I have been told that I need update my schema for exchange 2003 to get the Exchange tabs/fields in Active Directory. Will extending the schema with 2003 harm anything if I have already extended it with 2007?
- Since you already updated your schema the attributes exist in Active Directory, so don't try and extend it with the 2003 schema. It sounds like you just need a way to edit the attributes. ADSIEdit.msc or a script is probably going to be your best bet. The Microsoft Online Directory Synchronization utility does not make it easy to exclude objects from syching to the online directory. There is a way I've used in the past. Basically on the accounts you don't want to synchronize, set the mailnickname attribute equal to:
SystemMailbox{samaccountnameofaccount}
Replace samacccountnameofaccount with the actual samaccountname of the accunt you don't want to syncrhonize. I'm assuming that since you are on Notes, the mailnickname is not populated on these accounts. If it is populated, don't make these changes as they will cause big problems. For more information about how Directory Sync works you can request the Directory Synchronization in Depth Guide from http://www.messageops.com/MicrosoftOnlineDirectorySynchronizationInDepthDownload.html.
I've used this method on a past customer and have some vbscripts which can set that attribute on accounts you want to exclude from Directory Sync, just contact me and I'll give you a copy. This method is a bit complicated, and like Jeff mentions above, there might be a better way to go about this depending on what you need.
Chad - Hello,
check out Amit's Tank response on the issue of managing Exchange 2007 with Active directory users and computers - "Exchange 2007 and ADUC"
Best Regards,
