active-directorypowershell
I am receiving an error when I run this powershell command to add a new user:
PS > New-ADUser -Name "user1" -GivenName "test" -Surname "User" -Path "ou=Users"
The error returned when run is:
CategoryInfo : NotSpecified: (CN=user1,ou=Users:String) [New-ADUser], ADException
If I take of the "Path" parameter the user is added, but not added to an OU.
I've finally fixed this.
Interestingly Send-As is an AD permission - not an exchange permission as you might have expected.
Anyway, these are the steps:
Make the target mailbox "shareable" using this command in Powershell on your Exchange Server:
Set-Mailbox user1 -type:shared
If you get this error (same as in my first post):
You will need to find that user in AD and go to the properties >> Security >> Advanced:
You need to ENABLE the option to "Include inheritable permissions from this object's parent":
Once that is done you should be able to complete the folder share script.
Then actually grant the rights using this command:
Add-ADPermission user1 -User Ourdomain\User2 -ExtendedRights "Send As"
Hope that helps others who have the same problem.
Kieran
NB: I'm not a PS guru
My google fu turned up the following link.
In short, I think it has something to do with your -ResultSetSize $null portion of the script. In the link, the OP used -notlike "*"instead of the -eq "$Null"
Maybe play with that portion of the script and see what happens.
Best Answer
"ou=users" is not sufficient. You have to supply the full distinguished name of the OU you want the new account to be created in. It's also incorrect if you're talking about the Users container at the base of the domain, which is not an OU, but a container. Here are some examples.