Chapter 5. User and Contact Administration

One of your primary tasks as a Microsoft Exchange administrator is to manage user accounts and contacts. User accounts enable individual users to log on to the network and access network resources. In Active Directory, users are represented by User and InetOrgPerson objects. User and InetOrgPerson are the only Active Directory objects that can have Exchange mailboxes associated with them. Contacts, on the other hand, are people that you or others in your organization want to get in touch with. Contacts can have street addresses, phone numbers, fax numbers, and e-mail addresses associated with them. Unlike user accounts, contacts don’t have network logon privileges.

Understanding Users and Contacts

In Active Directory, users are represented as objects that can be mailbox-enabled or mail-enabled. A mailbox-enabled user account has an Exchange mailbox associated with it. Mailboxes are private storage areas for sending and receiving mail. A user’s display name is the name Exchange represents in the Global Address List and in the From field of e-mail messages.

Another important identifier for mailbox-enabled user accounts is the Exchange alias. The alias is the name that Exchange associates with the account for mail addressing. When your mail client is configured to use Exchange Server, you can type the alias or display name in the To, Cc, or Bcc fields of an e-mail message and have Exchange Server resolve the alias or name to the actual e-mail address.

Although most Microsoft Windows user accounts are mailbox-enabled, user accounts don’t have to have mailboxes associated with them. You can create user accounts without assigning a mailbox. You can also create user accounts that are mail-enabled rather than mailbox-enabled, which means that the account has an off-site e-mail address associated with it but doesn’t have an actual mailbox. Mail-enabled users have Exchange aliases and display names that Exchange Server can resolve to actual e-mail addresses. Internal users can send mail to the mail-enabled user account using the Exchange display name or alias, and the mail will be directed to the external address. Users outside the organization, however, can’t use the Exchange alias to send mail to the user.

It’s not always easy to decide when to create a mailbox for a user. To help you out, consider the following scenario:

  1. You’ve been notified that two new users, Elizabeth and Joe, will need access to the domain.

  2. Elizabeth is a full-time employee who starts on Tuesday. She’ll work on-site and needs to be able to send and receive mail. People in the company need to be able to send mail directly to her.

  3. Joe, on the other hand, is a consultant who is coming in to help out temporarily. His agency maintains his mailbox, and he doesn’t want to have to check mail in two places. However, people in the company need to be able to contact him, and he wants to ensure that his external address is available.

  4. You create a mailbox-enabled user account for Elizabeth. Afterward, you create a mail-enabled user account for Joe, ensuring that his Exchange information refers to his external e-mail address.

Mail-enabled users are one of several types of custom recipients that you can create in Exchange Server. Another type of custom recipient is a mail-enabled contact. You mail-enable a contact by specifying the external e-mail address that can be used to send e-mail to that contact.

Understanding the Basics of E-Mail Routing

Exchange uses e-mail addresses to route messages to mail servers inside and outside the organization. When routing messages internally, Exchange uses mail connectors to route messages to other Exchange servers, as well as to other types of mail servers that your company might use. The default connector, Exchange Routing Group Connector, provides a direct connection among Exchange servers in an organization. Simple Mail Transfer Protocol (SMTP) is the default transport for the Routing Group Connector. You can also configure X.400 as the transport among Exchange servers. Other connectors are available as well, including the following:

  • Connector for Lotus Notes

  • Connector for Novell GroupWise

You can use these connectors to connect Exchange with non-Exchange mail servers in an organization. When routing messages outside the company, Exchange uses mail gateways to transfer messages. The default gateway is SMTP.

When you create mail-enabled users or contacts, you must specify the type of address for the user or contact. When you create mailbox-enabled user accounts, Exchange automatically generates default e-mail addresses for SMTP and X.400.

The SMTP address is used for message routing to external systems. The X.400 e-mail address is used when you’ve specifically configured an X.400 connector to connect two routing groups and when Exchange can’t resolve the distinguished name for the account. Distinguished names are account identifiers that Exchange Server uses to locate Active Directory objects.

Keep in mind that if you’ve configured Exchange connectors, e-mail addresses for these connectors are generated as well. For details on Exchange organizations and mail connectors, see Chapter 13.

Working with Active Directory Users And Computers

Active Directory Users And Computers is the primary administration tool for managing users and contacts. You use this utility to do the following:

  • Create mailbox-enabled user accounts

  • Create mail-enabled user accounts

  • Manage directory contacts

  • Manage mail-enabled contacts

Running Active Directory Users And Computers

You can start Active Directory Users And Computers by selecting its related option on the Microsoft Exchange menu. Click Start, choose Programs or All Programs, choose Microsoft Exchange, and then select Active Directory Users And Computers. If the Exchange tools aren’t available, you’ll need to install them as described in Chapter 1, in the section "Exchange Server Administration Tools."

Tip

Tip

To provide quick access to Active Directory Users And Computers, click Start, choose Programs or All Programs, choose Microsoft Exchange, right-click Active Directory Users And Computers, and then select Pin To Start Menu. This makes Active Directory Users And Computers directly accessible from the Start menu.

Using Active Directory Users And Computers

Normally, Active Directory Users And Computers works with the domain to which your computer is currently connected. As shown in Figure 5-1, you can access computer and user objects in the current domain through the console tree. However, if you can’t find a domain controller, or the domain you want to work with isn’t displayed, you might need to connect to a domain controller in the current domain in a different domain. Other high-level tasks you might want to perform with Active Directory Users And Computers are viewing advanced options and searching for objects.

Using Active Directory Users And Computers.

Figure 5-1. Using Active Directory Users And Computers.

When you access a domain in Active Directory Users And Computers, you’ll note that the following standard set of folders is available:

  • Built-In. Shows built-in user groups.

  • Computers. The default container for computer accounts.

  • Domain Controllers. The default container for domain controllers.

  • ForeignSecurityPrincipals. Provides information on objects from trusted external domains. Normally, foreign security principals are created when an object from an external domain is added to a group in the current domain.

  • Saved Queries. Provides quick access to Active Directory queries you’ve saved.

  • Users. The default container for users.

You can also add folders for organizational units. An organizational unit is a subgroup of domains that often mirrors the business or functional structure of the company. For example, you could create organizational units called BizDev, Engineering, Marketing, Operations, Sales, and Support.

When you access a folder in Active Directory Users And Computers, you’ll see a list of the users and groups the folder contains. Users and groups are listed by name, type, and description. You’ll probably also want to display e-mail addresses, Exchange aliases, and Exchange mailbox stores associated with users. To do this, follow these steps:

  1. In Active Directory Users And Computers, click View, Add/Remove Columns.

  2. In the Add/Remove Columns dialog box, double click E-Mail Address, Exchange Alias, and Exchange Mailbox Store in the Available Columns list. This adds these fields to the Displayed Columns list.

  3. In the Available Columns list, select Description and click Move Down three times. This places the description at the end of the list.

  4. When you click OK, the new columns you’ve added are displayed in Active Directory Users And Computers. From now on, the additional columns should be displayed whenever you start Active Directory Users And Computers as well.

Connecting to a Domain Controller

Connecting to a domain controller serves several purposes. If you start Active Directory Users And Computers and no objects are available, you can connect to a domain controller to access user, group, and computer objects in the current domain. You might also want to connect to a domain controller when you suspect replication isn’t working properly and you want to inspect the objects on a specific controller. Once you’re connected, you’d look for discrepancies in recently updated objects.

To connect to a domain controller, follow these steps:

  1. In the console tree, right-click Active Directory Users And Computers. Then select Connect To Domain Controller.

  2. You’ll see the current domain and domain controller you’re working with in the Connect To Domain Controller dialog box shown in Figure 5-2.

    In the Connect To Domain Controller dialog box, select the domain controller you want to work with.

    Figure 5-2. In the Connect To Domain Controller dialog box, select the domain controller you want to work with.

  3. Available controllers in the domain are listed in the Select An Available Domain Controller list box. The default selection is Any Writable Domain Controller. If you select this option, you’ll connect to the domain controller that responds to your request first. Otherwise, choose a specific domain controller to connect to. Click OK.

Connecting to a Different Domain

In Active Directory Users And Computers you can work with any domain in the forest, provided you have access permissions. You connect to a domain by completing these steps:

  1. In the console tree, right-click Active Directory Users And Computers. Then select Connect To Domain.

  2. The current (or default) domain is displayed in the Connect To Domain dialog box. Type a new domain name, and then click OK. Or you can click Browse, and then select a domain in the Browse For Domain dialog box.

Searching for Existing Users and Contacts

Active Directory Users And Computers has a built-in search feature that allows you to find users, contacts, and other directory objects. You can easily search the current domain, a specific domain, or the entire directory.

You search for directory objects by completing the following steps:

  1. In the console tree, right-click the current domain or a specific container that you want to search. Select Find. This opens the Find Users, Contacts, And Groups dialog box shown in Figure 5-3.

    Find existing users and contacts in Active Directory using the Find Users, Contacts, And Groups dialog box.

    Figure 5-3. Find existing users and contacts in Active Directory using the Find Users, Contacts, And Groups dialog box.

  2. Select Users, Contacts, And Groups, and then use the In drop-down list to choose the location to search. If you right-clicked a container such as Users, this container is selected by default. To search all the objects in the directory, select Entire Directory.

  3. In the Name field, enter the name of the object you’re looking for, and then click the Exchange tab. Select Show Only Exchange Recipients.

  4. If you’d like to limit the search to specific types of recipients, select the related check boxes. For example, if you want to search only for users with mailboxes, select Users With Exchange Mailbox.

  5. After you’ve typed your search parameters, click Find Now. Any matching entries are displayed in the Find view (see Figure 5-4). Double-click an object to view or modify its property settings. Right-click the object to display a shortcut menu that you can use to manage the object.

    Matching recipients are displayed in the lower portion of the Find Users, Contacts, And Groups dialog box and can be managed by right-clicking an entry.

    Figure 5-4. Matching recipients are displayed in the lower portion of the Find Users, Contacts, And Groups dialog box and can be managed by right-clicking an entry.

Managing User Accounts and Mail Features

The sections that follow examine techniques that you employ to manage user accounts and the Exchange features of those accounts.

Creating Mailbox-Enabled and Mail-Enabled User Accounts

You need to create a user account for each user who wants to use network resources. The following sections explain how to create domain user accounts that are either mailbox-enabled or mail-enabled. If the user needs to send and receive e-mail, you’ll need to create a mailbox-enabled account. Otherwise, you can create a mail-enabled account.

Understanding Logon Names and Passwords

Before you create a domain user account, you should think for a moment about the new account’s logon name and password. All domain user accounts are identified with a logon name. This logon name can be (but doesn’t have to be) the same as the user’s e-mail address. In Windows domains, logon names have two parts:

  • User name. The account’s text label

  • User domain. The domain where the user account exists

For the user williams whose account is created in adatum.com, the full logon name for Windows is <[email protected]>.

User accounts can also have passwords and public certificates associated with them. Passwords are authentication strings for an account. Public certificates combine a public and private key to identify a user. You log on with a password interactively. You log on with a public certificate using a smart card and a smart card reader.

Although Windows displays user names to describe privileges and permissions, the key identifiers for accounts are security identifiers (SIDs). SIDs are unique identifiers that are generated when accounts are created. SIDs consist of the domain’s security ID prefix and a unique relative ID. Windows uses these identifiers to track accounts independently from user names. SIDs serve many purposes; the two most important are to allow you to easily change user names and to allow you to delete accounts without worrying that someone could gain access to resources simply by re-creating an account.

When you change a user name, you tell Windows to map a particular SID to a new name. When you delete an account, you tell Windows that a particular SID is no longer valid. Afterward, even if you create an account with the same user name, the new account won’t have the same privileges and permissions as the previous one because the new account will have a new SID.

Creating Domain User Accounts with and without Mailboxes

Generally, there are two ways to create new domain accounts:

  • Create a completely new user account. Right-click the container in which you want to place the user account, point to New, and then select User. This opens the New Object-User Wizard shown in Figure 5-5. When you create a new account, the default system settings are used.

    Configure the user display and logon names using the New Object-User dialog box.

    Figure 5-5. Configure the user display and logon names using the New Object-User dialog box.

  • Base the new account on an existing account. In Active Directory Users And Computers, right-click the user account you want to copy, and then select Copy. This starts the Copy Object-User Wizard, which is essentially the same as the New User dialog box. However, when you create a copy of an account, the new account gets most of its environment settings from the existing account. The properties that are retained include: group account memberships, profile settings, dial-in privileges, account expiration date, log on hours and permitted logon workstations.

Once the New Object-User or Copy Object-User Wizard is started, you can create the user account by completing the following steps:

  1. As shown in Figure 5-5, the first wizard page lets you configure the user display name and logon name. Type the user’s first and last name in the fields provided. The first and last names are used to create the Full Name, which is the user’s display name.

  2. As necessary, make changes to the Full Name field. For example, you might want to type the name in LastName FirstName MiddleInitial format or in FirstName MiddleInitial LastName format. The Full Name must be 64 characters or fewer.

  3. In the User Logon Name field, type the user’s logon name. Use the drop-down list to select the domain with which the account is to be associated. This sets the fully qualified logon name.

  4. The first 20 characters of the logon name are used to set the pre-Windows 2000 logon name, which must be unique in the domain. If necessary, change the pre-Windows 2000 logon name.

  5. Click Next. Configure the user’s password using the wizard page shown in Figure 5-6. The options for this dialog box are used as follows:

    • Password. The password for the account. This password should follow the conventions of your password policy.

    • Confirm Password. A field that ensures that you assign the account password correctly. Simply re-enter the password to confirm it.

    • User Must Change Password At Next Logon. If this check box is selected, the user must change the password at logon. This check box is selected by default for all new users.

    • User Cannot Change Password. If this check box is selected, the user can’t change the password.

    • Password Never Expires. If this check box is selected, the password for this account never expires. This setting overrides the domain account policy. Generally, it isn’t a good idea to set a password so it doesn’t expire because it is considered to be less secure, and security is always important.

    • Account Is Disabled. If this check box is selected, the account is disabled and can’t be used. Use this check box to temporarily prevent anyone from using an account.

    Configure the user’s password.

    Figure 5-6. Configure the user’s password.

  6. Click Next. If you’ve properly installed the Exchange extensions on the computer that you’re running, you’ll be able to select whether the account should have a mailbox. If the user shouldn’t have a mailbox, clear the Create An Exchange Mailbox check box, and then skip Steps 7 and 8.

  7. As shown in Figure 5-7, the Exchange alias is set to the logon name by default. You can change this value by entering a new alias. The Exchange alias is used to set the user’s e-mail address.

    Configure the user’s Exchange mailbox.

    Figure 5-7. Configure the user’s Exchange mailbox.

    Note

    Note

    Technically, the default value for the Exchange alias is set to the pre-Windows 2000 logon name, which is normally the same as the user logon name. However, if you change the pre-Windows 2000 logon name, the default Exchange alias will be set to the value you enter.

  8. If multiple Exchange servers are configured with an Information Store, use the Server drop-down list to specify the server on which the mailbox should be stored. Also, if several mailbox stores are configured, use the Mailbox Store drop-down list to specify the mailbox store that should be used.

  9. Click Next and then click Finish to create the account. If you created a mailbox-enabled account, SMTP, X.400, and connector-related e-mail addresses are configured automatically. Later on, you can add, change, and remove these addresses. You can also add additional addresses of the same type. For example, if Cindy Johnson is the company’s human resources administrator, she might have two SMTP addresses: <[email protected]> and <[email protected]>.

    Note

    Note

    If you’ve configured Exchange connectors, default addresses are generated for these connectors as well. Connectors available with Exchange 2000 include Connector for Lotus Notes and Connector for Novell GroupWise.

  10. Creating the user account isn’t the final step. Next, you might want to do the following:

    1. Add detailed contact information for the user, such as business phone number and title.

    2. Add the user to security and distribution groups.

    3. Associate additional e-mail addresses with the account.

    4. Enable or disable Exchange features for the account.

    5. Modify the user’s default delivery options, storage limits, and restrictions on the account.

Setting Contact Information for User Accounts

You can set contact information for a user account by completing the following steps:

  1. In Active Directory Users And Computers, double-click the user name. This opens the account’s Properties dialog box.

  2. Click the General tab. Use the following fields to set general contact information:

    • First Name, Initials, Last Name. Sets the user’s full name.

    • Display Name. Sets the user’s display name as seen in logon sessions and in Active Directory.

    • Description. Sets a description of the user.

    • Office. Sets the user’s office location.

    • Telephone Number. Sets the user’s primary business telephone number. If the user has other business telephone numbers that you want to track, click Other, and then use the Phone Number (Others) dialog box to enter additional phone numbers.

    • E-Mail. Sets the user’s business e-mail address.

    • Web Page. Sets the URL of the user’s home page, which can be on the Internet or the company intranet. If the user has other Web pages that you want to track, click Other, and then use the Web Page Address (Others) dialog box to enter additional Web page addresses.

    Tip

    Tip

    You must fill in the E-Mail and Web Page fields if you want to use the Send Mail and Open Home Page features in Active Directory Users And Computers.

  3. Click the Address tab, shown in Figure 5-8. Use the fields provided to set the user’s business address or home address. Normally, you’ll want to enter the user’s business address. This way, you can track the business locations and mailing addresses of users at various offices.

    Use the Address tab to set the user’s business or home address.

    Figure 5-8. Use the Address tab to set the user’s business or home address.

    Note

    Note

    You need to consider privacy issues before entering private information such as home addresses and home phone numbers for users. Discuss the matter with your human resources and legal departments. You might also want to get user consent before releasing home addresses.

  4. Click the Telephones tab. As appropriate, type the primary telephone numbers that should be used to contact the user:

    • Home Telephone

    • Pager

    • Mobile

    • FAX

    • IP Phone

  5. You can configure other numbers for each type of telephone number. Click the associated Others button, and then use the dialog box provided to enter additional contact numbers.

  6. Click the Organization tab. As appropriate, type the user’s title, department, and company.

  7. To specify the user’s manager, click Change, and then in the Select User Or Contact dialog box, select the user’s manager. When you specify a manager, the user shows up as a direct report in the manager’s account.

  8. Click Apply or OK to apply the changes.

Changing a User’s Exchange Server Alias and Display Name

Each mailbox-enabled user account has an Exchange alias, first name, last name, and display name associated with it. The Exchange alias determines the SMTP and X.400 e-mail addresses. The logon name is the default SMTP alias. The display name determines the X.400 address.

Whenever you change the naming information, new e-mail addresses can be generated and set as the default addresses for SMTP, X.400, and Exchange connectors you’ve configured. The previous e-mail addresses for the account aren’t deleted. Instead, these e-mail addresses remain as alternatives to the defaults. To learn how to change or delete these additional e-mail addresses, see the section of this chapter entitled "Adding, Changing, and Removing E-Mail Addresses."

To change the Exchange alias and display name on a user account, complete the following steps:

  1. In Active Directory Users And Computers, double-click the user name. This opens the account’s Properties dialog box.

  2. Click the General tab, and then use the following fields to modify the current name:

    • First Name, Initials, Last Name. Sets the user’s full name

    • Display Name. Sets the user’s display name as seen in logon sessions and in Active Directory

  3. Click the Exchange General tab, and then in the Alias field, enter the new Exchange alias.

  4. Click OK.

Adding, Changing, and Removing E-Mail Addresses

When you create a mailbox-enabled user account, default e-mail addresses are created for SMTP, X.400, and any connectors you’ve configured. Any time you update the user’s display name or Exchange alias, new default e-mail addresses can be created. However, the old addresses aren’t deleted. They remain as alternative e-mail addresses for the account.

To add, change, or remove an e-mail address, follow these steps:

  1. Open the Properties dialog box for the account by double-clicking the user name in Active Directory Users And Computers. Then click the E-Mail Addresses tab.

  2. To add a new e-mail address, click New. In the New E-Mail Address dialog box, select the type of e-mail address and then click OK. Complete the Properties dialog box and then click OK again.

    Tip

    Tip

    Use SMTP as the address type for standard Internet e-mail addresses. For details on how to use other types of e-mail addresses, see Chapter 13.

  3. To change an existing e-mail address, double-click the address entry and modify the settings in the Properties dialog box. Click OK.

  4. To delete an e-mail address, select it, and then click Remove. Click Yes when prompted to confirm the deletion.

Note

Note

You can’t delete the default SMTP address. Exchange Server uses the SMTP address to send and receive messages.

Setting a Default Reply-To Address

Each e-mail address type has one default reply address. To change the default reply address, follow these steps:

  1. Open the Properties dialog box for the account by double-clicking the user name in Active Directory Users And Computers. Then click the E-Mail Addresses tab.

  2. Current default e-mail addresses are highlighted with bold text. E-mail addresses that aren’t highlighted are used only as alternative addresses for delivering messages to the current mailbox.

  3. To change the current default settings, select an e-mail address that isn’t highlighted and then click Set As Primary.

Enabling and Disabling Exchange Server Mail

Mail-enabled users and contacts are defined as custom recipients in Exchange Server. They have an Exchange alias and an external e-mail address. You can mail-enable a user or contact by completing the following steps:

  1. In Active Directory Users And Computers, right-click the related entry, and then select Exchange Tasks to start the Exchange Task Wizard.

  2. If a Welcome page is displayed, click Next. You can skip the Welcome page in the future by selecting Do Not Show This Welcome Page Again.

  3. Under Available Tasks, select Establish E-Mail Addresses and then click Next.

  4. Enter an Exchange Alias for the user or contact, and then click Modify.

  5. You’ll see the New E-Mail Address dialog box. Select the type of e-mail address and then click OK.

  6. Complete the Properties dialog box for the e-mail address, and then click OK again.

  7. On the Exchange Task Wizard page, click Next and then click Finish.

Later, if you want to delete the Exchange alias and remove any e-mail addresses that might be associated with the user or contact, follow these steps:

  1. In Active Directory Users And Computers, right-click the related entry, and then select Exchange Tasks to start the Exchange Task Wizard.

  2. If a Welcome page is displayed, click Next. You can skip the Welcome page in the future by selecting Do Not Show This Welcome Page Again.

  3. Under Available Tasks, select Delete E-Mail Addresses and then click Next.

  4. Click Next and then click Finish.

Creating a User Account to Receive Mail and Forward Off-Site

Custom recipients, such as mail-enabled users and contacts, don’t normally receive mail from users outside the organization because a custom recipient doesn’t have an e-mail address that resolves to a specific mailbox in your organization. At times, though, you might want external users, applications, or mail systems to be able to send mail to an address within your organization and then have Exchange forward this mail to an external mailbox.

Tip

Tip

In my organization I’ve created forwarding mailboxes for pager alerts. This simple solution lets managers (and monitoring systems) within the organization quickly and easily send text pages to IT personnel. Here, I’ve set up mail-enabled contacts for each pager e-mail address, such as <[email protected]>, and then created a mailbox that forwards e-mail to the custom recipient. Generally, the display name of the mail-enabled contact is in the form Alert User Name, such as Alert William Stanek. The display name and e-mail address for the mailbox are in the form Z LastName and <[email protected]>, such as Z Stanek and <[email protected]>, respectively. Afterward, I hide the mailbox so that it isn’t displayed in the global address list or in other address lists so users can see only the Alert William Stanek mailbox.

To create a user account to receive mail and forward off-site, follow these steps:

  1. In Active Directory Users And Computers, create a contact for the user. Name the contact X – User Name, such as X – William Stanek. Be sure to establish an external e-mail address for the contact that refers to the user’s Internet address.

  2. Create a user account in the domain. Name the account with the appropriate display name, such as William Stanek. Be sure to create an Exchange mailbox for the account but don’t grant any special permission to the account. You might want to restrict the account so that the user can’t log on to any servers in the domain.

  3. Open the Properties dialog box for the user account by double-clicking the user name in Active Directory Users And Computers. Click the Exchange General tab.

  4. Click Delivery Options.

  5. In the Delivery Options dialog box, click Forward To, and then click Modify.

  6. In the Select Recipient dialog box, select the mail-enabled contact you created earlier, and then click OK. You can now use the user account to forward mail to the external mailbox.

Changing a User’s Wireless Service and Protocol Options

When you create user accounts with mailboxes, global settings determine the wireless services and protocols that are available. You can change these settings for individual users at any time by completing the following steps:

  1. In Active Directory Users And Computers, double-click the related entry, and then click the Exchange Features tab. As shown in Figure 5-9, configure the following wireless services and protocols for the user:

    • Outlook Mobile Access. Allows the user to browse the mailbox using a wireless device.

    • User Initiated Synchronization. Allows the user to synchronize the mailbox with wireless devices.

    • Up-To-Date NotificationsEnsures the data on a wireless device is always up to date. This option can only be enabled when User Initiated Synchronization is also enabled.

    • Outlook Web Access. Permits the user to access the mailbox with a Web browser.

    • POP3. Permits the user to access the mailbox with a POP3 e-mail client.

    • IMAP4. Permits the user to access the mailbox with an IMAP4 email client.

    You change wireless service and protocol options for users through the Exchange Task Wizard.

    Figure 5-9. You change wireless service and protocol options for users through the Exchange Task Wizard.

  2. Select an option, then click Enable or Disable as appropriate to change the status. If you want to change the properties of a protocol, select the protocol and then click Properties.

  3. Click OK.

Renaming User Accounts

In Active Directory Users And Computers, you can rename a user account by completing the following steps:

  1. Right-click the account name and then choose Rename. Enter the new account name when prompted.

  2. When you rename a user account, you give the account a new label. Changing the name doesn’t affect the SID, which is used to identify, track, and handle accounts independently from user names.

Note

Note

Marriage is a common reason for changing the name of user accounts. For example, if Judy Lew (JUDYL) gets married, she might want her user name to be changed to Judy Kaethler (JUDYK). When you change the user name from JUDYL to JUDYK, all associated privileges and permissions will reflect the name change. Thus, if you view the permissions on a file that JUDYL had access to, JUDYK will now have access (and JUDYL will no longer be listed).

Deleting User Accounts and Contacts

Deleting an account permanently removes the account. Once you delete an account, you can’t create an account with the same name and the same permissions as the original account because the SID for the new account won’t match the SID for the old account. That doesn’t mean that once you delete an account, you can never again create an account with that same name. For example, a person might leave the company only to return a short while later. You can create an account using the same naming convention as before, but you’ll have to redefine the permissions for that account.

Because deleting built-in accounts could have far-reaching effects on the domain, Windows doesn’t let you delete built-in user accounts. You could remove other types of accounts by selecting them and pressing the Del key, or by right-clicking and selecting Delete. You’ll see the prompt shown in Figure 5-10. If you’d like to delete the user’s e-mail address and mark the mailbox for deletion, click Yes. If you click No, Windows won’t delete the account.

Deleting a user’s account deletes the user’s e-mail address and marks the associated mailbox for deletion. Confirm the action by clicking Yes.

Figure 5-10. Deleting a user’s account deletes the user’s e-mail address and marks the associated mailbox for deletion. Confirm the action by clicking Yes.

Note

Note

Because Exchange security is based on domain authentication, you can’t have a mailbox without an account. If you still need the mailbox for an account you want to delete, you should disable the account instead of deleting it. Disabling the account prevents the user from logging on, but you can still access the mailbox if you need to. To disable an account, right-click the account in Active Directory Users And Computers, and then select Disable Account.

Managing Contacts

Contacts represent people with whom you or others in your organization want to get in touch. Contacts can have directory information associated with them, but they don’t have network logon privileges.

Creating Standard and Mail-Enabled Contacts

The only difference between a standard contact and a mail-enabled contact is the presence of e-mail addresses. A mail-enabled contact has one or more e-mail addresses associated with it; a standard contact doesn’t. When a contact has an e-mail address, you can list the contact in the Global Address List or other address lists. This allows users to send messages to the contact.

You can create a standard or mail-enabled contact by completing the following steps:

  1. Start Active Directory Users And Computers by selecting its related option on the Microsoft Exchange menu.

  2. Right-click the container in which you want to place the contact, choose New, and then choose Contact. This opens the New Object-Contact dialog box, shown in Figure 5-11.

    Enter the contact’s first, last, full, and display names.

    Figure 5-11. Enter the contact’s first, last, full, and display names.

  3. Enter the contact’s first name, initials, and last name. The contact’s full name is filled in automatically. The full name is displayed in Active Directory Users And Computers, and it’s also the name that users can search for in the directory.

  4. The display name is displayed in the Global Address List and other address lists created for the organization. The display name is also used when addressing e-mail messages to the contact. If the contact should have a display name that’s different from the full name, enter the display name.

  5. Click Next. If the contact shouldn’t be mail-enabled, clear the Create An Exchange E-Mail Address check box, and then skip Steps 6 and 7.

  6. Enter an Exchange alias for the contact, and then click Modify. You’ll see the New E-Mail Address dialog box.

  7. Select the type of e-mail address, and then click OK. Complete the Properties dialog box, and then click OK again.

  8. Click Next, and then click Finish. Active Directory Users And Computers creates the new contact.

Setting Additional Directory Information for Contacts

You can set additional directory information for a contact by completing the following steps:

  1. Double-click the contact’s name in Active Directory Users And Computers. This opens a Properties dialog box.

  2. Use the General tab to set general contact information, including the following:

    • First Name, Initials, Last Name. Sets the contact’s full name

    • Display Name. Sets the contact’s display name as seen in address lists

    • Description. Sets a description of the contact

    • Office. Sets the contact’s office location

    • Telephone Number. Sets the contact’s primary business telephone number

    • E-Mail. Sets the contact’s business e-mail address

    • Web Page. Sets the Uniform Resource Locator (URL) of the contact’s home page

  3. Click the Address tab, and then use the fields provided to set the contact’s business address.

  4. Click the Telephones tab. As appropriate, type the primary telephone numbers for the contact. You can configure other numbers for each type of telephone number. Click the associated Others button, and then use the dialog box provided to enter additional contact numbers.

  5. Click the Organization tab. As appropriate, type the contact’s title, department, and company.

  6. To specify the contact’s manager, click Change, and then in the Select User Or Contact dialog box, select the user’s manager. When you specify a manager, the user shows up as a direct report in the manager’s account.

  7. Click Apply or OK to apply the changes.

Changing E-Mail Addresses Associated with Contacts

When you create a new mail-enabled contact, you set the default e-mail address identifier and type as well as a default Exchange alias. You can change these identifiers by completing the following steps:

  1. Double-click the contact name in Active Directory Users And Computers. This opens the account’s Properties dialog box.

  2. Click the Exchange General tab.

  3. If desired, enter an Exchange alias for the contact, and then click Modify. If the contact already has an associated e-mail address, specify whether you want to create a new address or modify the existing address. Click OK.

  4. When you modify an existing address, you’ll see a Properties dialog box. Make the necessary changes and then click OK.

  5. When you create a new address, you’ll see the New E-Mail Address dialog box. Here, select the type of e-mail address and then click OK. Complete the Properties dialog box, and then click OK again.

  6. Contacts also have default addresses for SMTP, X.400, and other connectors you’ve configured. You can change these through the E-Mail Addresses tab.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset