EAP by group (Full Version)

All Forums >> [Microsoft Exchange 2007] >> General



Message

dunch -> EAP by group (29.Dec.2008 6:04:42 PM)

Hi all.

I´m totaly newbee in exchange 2007.
How do i maken a EAP based on group member ship?

Regards Henrik



mark@mvps.org -> RE: EAP by group (29.Dec.2008 6:11:18 PM)

EAP as in authentication?
You authenticate to AD. You should provide some more information.



Elan Shudnow -> RE: EAP by group (29.Dec.2008 6:34:38 PM)

Think he meant Exchange Activesync Policy.  If that's the case, there's no way to dynamically do it other than creating the policy, use PowerShell to find all the users of a group and cycle through the users using get-casmailbox and assigning the policy to those specific users.



mark@mvps.org -> RE: EAP by group (29.Dec.2008 6:38:15 PM)

Ahhh, of course.
I've been having an "AD day" :-)



dunch -> RE: EAP by group (29.Dec.2008 7:01:30 PM)

Hi.

EAP as in email address policy



dunch -> RE: EAP by group (29.Dec.2008 7:04:38 PM)

Sorry for my lak off details..



dunch -> RE: EAP by group (29.Dec.2008 7:09:15 PM)

i want to create a email address policy based on grup membership so that users in group1 get test1.com and group 2 get group2.com and so on.

Is that possible?



Sembee -> RE: EAP by group (29.Dec.2008 7:48:05 PM)

Not possible.
You would have to use a custom attribute on each user.
The options that are available to you are in the wizard within EMC. You will see that they are quite limited.

Simon.



dunch -> RE: EAP by group (30.Dec.2008 2:51:15 PM)

OK, bummer :-(

What to do ??? EAP by company ?



Elan Shudnow -> RE: EAP by group (30.Dec.2008 3:24:41 PM)

http://technet.microsoft.com/en-us/library/aa996800.aspx

You can see all the conditions there.



dunch -> RE: EAP by group (30.Dec.2008 6:43:36 PM)

Hey Elan.

What would you do if i may ask?



Elan Shudnow -> RE: EAP by group (30.Dec.2008 7:17:35 PM)

It doesn't really matter what I would do.  The options are there.  Choose the best that fits your needs and do it.  There's always the option to script out the expansion of a group and add the Custom Attribute for every user and then just filter on that attribute.  you can have the script run using Scheduled Tasks so it'll automatically update the list.  I'd personally just one of the available built-in options if possible as there's less working parts and you're keeping things more simple.



dunch -> RE: EAP by group (30.Dec.2008 7:34:18 PM)

Is this comman ok?

New-EmailAddressPolicy “testdom eap” -RecipientFilter {((MemberOfGroup
-eq “CN=testdom,OU=Testdom=domain,DC=local”) -and (RecipientType
-eq ‘UserMailbox’))}
-EnabledPrimarySMTPAddressTemplate ‘SMTP:%g%1s@testdom.local’

Have the users in a OU hosting - OU testdom then a OU for the users and one for the group.
Dos it seem right?



dunch -> RE: EAP by group (30.Dec.2008 8:24:01 PM)

When i type this comman i get som errors.
New-EmailAddressPolicy “COMTROL EAP” -RecipientFilter {((MemberOfGroup -eq “CN=CONTROL,OU=Groups,OU=CONTROL,OU=Hosting,DC=domain,DC=local”) -and (RecipientType -eq ‘UserMailbox’))} -EnabledPrimarySMTPAddressTemplate ‘SMTP:%g%1s@testdom.local’

Error:
New-EmailAddressPolicy : Cannot bind parameter 'RecipientFilter' to the target.
Exception setting "RecipientFilter": "Invalid filter syntax. For a description
of the filter parameter syntax see the command help.
"((MemberOfGroup -eq "CN=CONTROL,OU=Groups,OU=CONTROL,OU=Hosting,DC=cpit,DC=dk"
) -and (RecipientType -eq `UserMailbox'))" at position 21."
At line:1 char:54
+ New-EmailAddressPolicy "COMTROL EAP" -RecipientFilter  <<<< {((MemberOfGroup
-eq "CN=CONTROL,OU=Groups,OU=CONTROL,OU=Hosting,DC=domain,DC=local") -and (Recipient
Type -eq `UserMailbox'))} -EnabledPrimarySMTPAddressTemplate `SMTP:%g%1s@testdom.local'



Elan Shudnow -> RE: EAP by group (30.Dec.2008 9:57:10 PM)

You can create the EAP via the GUI.  Give it a try, less prone to error.  When you go to initiate the creation of the EAP, it'll tell you the PowerShell code you are running in case you want to reference it to what you are entering incorrectly.



dunch -> RE: EAP by group (31.Dec.2008 5:05:55 AM)

Like written ealier i can not create a EAP that give members of a group a serten smtp address with GUI it have to be with powershell.



Sembee -> RE: EAP by group (1.Jan.2009 12:55:41 PM)

If you give the users a custom attribute, which can be done in bulk with something like admodify.net then you can create the Email Address Policy through the GUI using that attribute.

Simon.



Elan Shudnow -> RE: EAP by group (1.Jan.2009 1:07:12 PM)

quote:

ORIGINAL: dunch

Like written ealier i can not create a EAP that give members of a group a serten smtp address with GUI it have to be with powershell.



Actually it's been stated that you need to use the Custom Attribute if you want to do it by group.  And a couple options have been presented to you.  Simon has stated you can use ADModify. And I have said you can have a script to find all members of a group and automatically give them a custom attribute.  I also gave you the option of using one of t he available EAP options such as Company.  The choice is yours.



Page: [1]