• No results found

Creating mailbox-enabled and mail-enabled user accounts

SAMPLE 6-5 Remove-MailUser cmdlet syntax and usage

Syntax

Remove-MailUser -Identity "Identity" [-DomainController DCName] [-IgnoreDefaultScope {$true | $false}]

[-KeepWindowsLiveID {$true | $false}]

Usage

Remove-MailUser -Identity "Frank Miller" Creating domain user accounts with mailboxes

You can create a new domain user account with a mailbox in several ways. If you are using a hybrid configuration and want the user created in Active Directory and the mailbox created in Exchange online, you can use the techniques discussed earlier under “Understanding on-premises and online recipient management.” Otherwise, you can create a new domain user account and a mailbox for that account using only your on-premises Exchange administration tools. To do this, complete the fol- lowing steps:

1. In Exchange Admin Center, select Recipients in the feature pane and then select Mailboxes.

2. Tap or click New and then select User Mailbox. This opens the New User Mailbox dialog box, shown in Figure 6-7.

FIGURE 6-7 Creating a new domain user account with a mailbox.

3. In the Alias text box, type an alias for the mailbox user. This alias should uniquely identify the user in the Exchange organization. Alias names cannot contain spaces.

NOTE The alias and domain suffix are combined to create the email address for the user. For example, if the alias is tedc and the domain suffix is pocket-consul- tant.com, the email address is set as [email protected].

4. Select New User. Type the user’s first name, middle initial, and last name in the text boxes provided. These values are used to create the Display Name entry as well as the Active Directory name with on-premises Exchange.

5. The Display Name and Name properties can’t exceed 64 characters. As necessary, make changes to the Display Name, Name, or both text boxes. For example, you might want to type the name in LastName FirstName Middle- Initial format or in FirstName MiddleInitial LastName format.

IMPORTANT the difference between the Display Name and the Name proper- ties is subtle but important. the Display Name property sets the name displayed in exchange and Outlook. the Name property sets the display name in active Directory and is the Common Name (CN) value associated with the user.

6. The user account is created in the default user container, which typically is the Users container. Because you’ll usually need to create new user accounts in a specific organizational unit rather than in the Users container,

click Browse to the right of the Organizational Unit text box. In the Select An Organizational Unit dialog box, shown in Figure 6-8, choose the location to store the account and then click OK.

FIGURE 6-8 Selecting the organizational unit for the new user.

7. In the User Logon Name text box, type the user’s logon name. Use the drop- down list to select the domain with which you want to associate the account. This sets the fully qualified logon name, such as msandberg@pocket-consul- tant.com.

8. Type and then confirm the password for the account. This password must follow the conventions of your organization’s password policy. Typically, this means that the password must include at least eight characters and must use three of the four available character types: lowercase letters, uppercase let- ters, numbers, and symbols.

9. You can select the Require Password Change On Next Logon check box to ensure that the user changes the password at next logon.

10. Tap or click More Options. At this point, you do the following:

Specify the mailbox database Exchange uses the mailbox provision- ing load balancer to select a database to use when you create a mailbox and do not specify the mailbox database to use. If you want to specify the database to use, tap or click Browse to the right of the Mailbox Database box. In the Select Mailbox Database dialog box, you’ll see a list of avail- able mailbox databases listed by name, server, and Exchange version. Select the mailbox database to use and then select OK.

Create an archive mailbox If you want to create an archive mailbox for the user, select the related check box. Items in the user’s mailbox will be moved automatically to the archive mailbox based on the default retention

policy. You also can chose a mailbox database for the archive. If you don’t chose a mailbox database for the archive, Exchange chooses one for you. ■ Assign an address book policy By default, a user has access to the

full address book information in the organization. Using address book policies, you can create customized address books. To apply an available policy, select it from the drop-down list.

11. Tap or click Save. Exchange Admin Center creates the new mailbox user. If an error occurs, neither the user nor the mailbox will be created. You will need to tap or click OK, correct the problem, and then tap or click Save again. Creating the user account and mailbox isn’t necessarily the final step. You might also want to do the following:

■ Add detailed contact information for the user, such as a business phone number and title

■ Add the user to security and distribution groups ■ Enable or disable mailbox features for the account

■ Modify the user’s default delivery options, storage limits, and restrictions on the account

■ Associate additional email addresses with the account

NOTE For all mailbox-enabled accounts, an SMTP email address is configured au- tomatically. You can also add more addresses of the same type. For example, if Brian Johnson is the company’s human resources administrator, he might have the primary SMtp address of [email protected] and an alternate SMtp address of [email protected].

You may also want to apply appropriate policies to the mailbox. Various types of policies control how users access their mailboxes and how mailbox data is stored. These policies include:

Address book policy Controls access to the address book information in the organization and allows you to create custom views for various users. A default address book policy is not created when you install Exchange 2013. You can check to see if any address book policies have been created by en- tering get-addressbookpolicy in Exchange Management Shell.

Mobile device mailbox policy Controls security settings for mobile devices. When you install Exchange Server, a default mobile device mailbox policy is created and applied automatically to all new mailboxes you create unless you specify a different policy to use. To view the settings for the de- fault policy, enter get-mobiledevicemailboxpolicy –identity “Default” in Exchange Management Shell.

Retention policy Specifies the delete and move-to-archive rules that are applied to items in mailboxes. Exchange Server 2013 uses retention policies and retention tags as part of the Messaging Records Management feature. When you install Exchange 2013 a default retention policy is created but is not applied to new mailboxes by default. Therefore, you must explicitly

assign a retention policy. To view the settings for the default policy, enter

get-retentionpolicy –identity “Default MRM Policy” | fl in Exchange

Management Shell.

Role assignment policy Controls management roles assigned to users. When you install Exchange Server, a default role assignment policy is created and applied automatically to all new mailboxes you create unless you specify a different policy to use. To view the settings for the default policy, enter

get-roleassignmentpolicy –identity “Default Role Assignment Policy”

in Exchange Management Shell.

Sharing policy Controls how users can share calendar and contact infor- mation with users outside your organization. When you install Exchange Server, a default sharing policy is created and applied automatically to all new mailboxes you create unless you specify a different policy to use. To view the settings for the default policy, enter get-sharingpolicy –identity

“Default Sharing Policy” in Exchange Management Shell.

In Exchange Management Shell, you can create a user account with a mailbox by using the New-Mailbox cmdlet. Sample 6-6 provides the syntax and usage. When you are prompted, enter a secure password for the new user account.