20 pts.
 Active directory/ user/mailbox/permission/association
Hello In my organisation, we have over a thousand of users, and previous sysadmin created users in active directory under three different objects> 1-they created just the user account and disabled the creation of mailbox in the same process. 2-They created a security group which will be called the "positional mailbox or mailbox" which will hold the title of the person. 3-they created the mailbox itself. They then added the login account to the positional group , and they added the mailbox to the same positional group which is the security group, then they gave permission full control to the positional group to have full access to the mailbox. they did it this way because people used to rotate all the time and 2 people can have the same position, that way when someone leave the other person can take over the other's person mailbox for operational purpose because they have the same position. Now we are trying to figure out a way to have only two objects: user account and mailbox only and get rid of the positional group all at once in a bulk way because we have too many users without altering the users account and the mailboxes. We tried to do it one by one but it taking too long by 1)- going to the exchange server/system manager find user mailbox/exchange task, delete association, right click on mailbox storage group, run cleanup agent. then go back to the mailbox itself with the red x then reconnect it to log in account. then go back to active directory then delete the famous positional group. But then we had a problem because the display name and the email address won't have anymore the user's title for example MICROSOFT_HQ_SYSADMIN4@HQ.MICROSOFT.COM, but instead we'll have just the userfirstname.lastname@companyname.com, and we do not want that Please HELP!!! Thank you

Software/Hardware used:
win server 2003 active directory exchange server2003
ASKED: April 1, 2010  8:45 PM
UPDATED: April 8, 2010  3:16 PM

Answer Wiki:
For bulk modifications, I would lean towards scripting if you are knowledgeable and comfortable at the level. If you are not comfortable with scripting, I would then utilize 3rd party tools like Managed Engine's ADManager Plus which allows bulk modifications of user accounts. With the modification, you can assign the individual user to that mailbox, remove the positional group. Once that is all done, you can modify the mailbox settings as per default e-mail address or add a new PRIMARY SMTP e-mail with the new mail address format so no e-mails are dropped utilizing the old format. You may additionally want to modify the recipients policy to the standard format you desire of firstname.lastname@company.com
Last Wiki Answer Submitted:  April 8, 2010  3:16 pm  by  Aguacer0   8,120 pts.
All Answer Wiki Contributors:  Aguacer0   8,120 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _