Dynamic distribution group with enabled accounts only

exchangeexchange-2007

Is it possible to add a condition to dynamic distribution group in Exchange 2007 that will filter for enabled accounts only?

When a staff member leaves we have to keep their account in the system for a certain amount of time because of data protection or something, but eventually the mailboxes get full and start rejecting mail, which is annoying for the senders.

Best Answer

When you disable the user account, be sure to disable the corresponding mailbox as well.

You can then filter on the IsMailboxEnabled property in your distribution groups:

New-DynamicDistributionGroup -Name AllUsersGroup -OrganizationalUnit domain.tld/Users -RecipientFilter {((RecipientType -eq 'UserMailbox') -and -not(IsMailboxEnabled -eq $false))}

Related Solutions

Powershell – opath syntax to force dynamic distribution group field as numerical comparison? (Exchange 2010)

Spoke with Microsoft.

"You are correct on the reasons why its not working Pager just like telephone Number Is a Unicode string, for the filter we have created to work correctly it should be a Large integer, the sad part about the Large integer attributes available for users is they are mostly system attributes something like (uSNCreated changed etc). I have tried it hare in my lab environment as well at it doesn't seem to work as desired, I think we will need to look for other options."

So, at the moment, with Exchange 2010 SP1, it appears you can't do an integer comparison with anything other than a few key system attributes (IssueWarningQuota, MaxReceiveSize). Everything else will be treated as a string compare.

The other options the support suggested were things like hoping they were in the same Exchange Store, Particular OU's, or some other criteria. Since these won't work in our environment, I'm gonna have to build these DL's nightly via Powershell.

Powershell – Give AD Security Group Exchange Full Access Permission

You have it backwards there. The -user reference is to the security principal that you give permission to. -Identity is the identity of the resource that the -user gets permissions on.

$Mailboxes = Get-Mailbox -ResultSize unlimited 
foreach($Mailbox in $Mailboxes){Add-MailboxPermission -Identity $Mailbox -User 'IT' -AccessRights 'FullAccess'}

Best Answer

Related Solutions

Powershell – opath syntax to force dynamic distribution group field as numerical comparison? (Exchange 2010)

Powershell – Give AD Security Group Exchange Full Access Permission

Related Topic