Tag Archives: Exchange

When do we not default?

I had a very interesting catastrophe a little while back.  Working with a customer deploying into production we basically broke the email of a bunch of senior VIPs.  How?  We defaulted the mDBUseDefaults attribute!  How does this happen?  The state-based … Continue reading

Posted in FIM | Tagged , , , , , | Leave a comment

Implementing Exchange Online with an existing on-premises identity management solution that provisions mailboxes

I’m going to start this post with a bold statement.  Implementing Exchange Hybrid in an enterprise environment that has an existing on-premises identity management (IdM) capability that provisions on-premises mailboxes is not easy.  Especially when that on-premises IdM solution is … Continue reading

Posted in FIM, FIM 2010 R2, Office 365 | Tagged , , , , , , , | 6 Comments

GALSync and DirSync in harmony

It is quite typical to have either a multiple-forest directory synchronisation solution, or a directory synchronisation solution, in an organisation that also performs some type of Global Address List (GAL) synchronisation, a.k.a. GALSYNC.  Forefront Identity Manager (FIM) provides an out-of-box … Continue reading

Posted in Azure Active Directory, FIM, FIM 2010 R2, Office 365 | Tagged , , , , , , , , , | 18 Comments

Office 365 Exchange Hybrid DIRSYNC write-back attributes and permissions

Those of you implementing the DIRSYNC appliance or the Forefront Identity Manager (FIM) multi-forest directory synchronisation solution might need to implement the write-back of attributes into the Active Directory Domain Services (AD DS) forest for the purpose of Exchange Hybrid, … Continue reading

Posted in FIM, Office 365 | Tagged , , , , , , , | 4 Comments

Delegating the minimum set of permissions for mailbox-enabled user and linked mailbox provisioning

In my previous post I described the minimum set of permissions required by the ADMA account to provision an AD DS user object.  In this post I’d like to expand on that and provide the minimum set of permissions required … Continue reading

Posted in Active Directory, FIM, FIM 2010, FIM 2010 R2 | Tagged , , , , , , , , , , , , , , , , , , , | 3 Comments

exported-change-not-reimported error when provisioning a linked mailbox

When provisioning a linked-mailbox using Forefront Identity Manager (FIM) 2010, Identity Lifecycle Manager (ILM) 2007 or Identity Integration Server (MIIS) 2003 the Active Directory Management Agent (ADMA) throws an exported-change-not-reimported error for each new mailbox-enabled user. Upon closer inspection you … Continue reading

Posted in Active Directory, FIM, FIM 2010 | Tagged , , , , , , , , , , , , , , , | 2 Comments