Granular permissions to move Computer Objects out of Computers Container in Active Directory

To configure granular permissions to move computer objects out of Computers container in Active Directory follow the steps:

1. Use ADSIEdit/open "Default naming context".
2. Navigate to Computers container/Security/Advanced.
3. Desired group along with obvious permissions ("Delete Computer Objects" for "This object only", "List contents", "List object" and "Read all properties" for "This object only") needs to have "Allow" permission for "Write all properties" for "Descendant Computer objects".

List of Users with expired password - Quest Powershell

Get-QADUser -SearchRoot "OU=YourOU,DC=YourDomain,DC=com" -SearchScope Subtree -Enabled -Size 0 | Where-Object {($_.PasswordIsExpired) -eq $True} | fl displayname, *password*

Powershell command to see all Exchange Hub Transport Queues in Org in one place

Get-ExchangeServer | ?{$_.serverrole -eq 'HubTransport'} | Get-Queue

Issue: Out-Of-Office (OOF) is not being sent

Issue: Out-Of-Office (OOF) is not being sent.

(also you see event id 3004 in the application log of Exchange mailbox Server:

The Rules quota of mailbox XXX has been reached and the automatic reply rules can't be enabled or updated. Delete some existing rules or increase the user's rule quota and try to set the automatic reply again. You can use the Set-Mailbox cmdlet to increase a user's rules quota.)

Resolution:

Increase the user rules quota:

Get-mailbox XXX | select rulesquota

Set-mailbox XXX –RulesQuota 128KB

Exchange DBs (edb file) unexpected growth (with plenty of "white space" should be available) - Exchange 2010

Problem: Exchange DBs (edb file) unexpected growth (with plenty of "white space" should be available) - Exchange 2010

Apparently, this is the issue of Exchange 2010 for databases created pre-Exchange 2010 SP3 RU1.

Resolution:

1.       Get-MailboxDatabase -Status | ft name,AvailableNewMailboxSpace

2.       Start Extra and leave it run in circular logging..

a.        Run Extra (Start -> Run -> Extra) 

b.      Go to the welcome screen

c.        Choose Select a task 

d.      Choose Trace Control (Click OK on any pop up that appears)

e.      Leave default options (max trace file size 100MB, circular logging, select trace tags manually) 

f.        Click Set Manual Trace Tags 

g.       Select all checkboxes under Trace Types 

h.      Choose "Store" under "Components to Trace" 

i.         Choose "tagCleanupMsg" under Trace Tags 

j.        Click Start Tracing 

3.       Let this run for 20 minutes.

4.       Get-MailboxDatabase -Status | ft name,AvailableNewMailboxSpace

    Running Extra with parameters above makes Exchange starting reclaiming "white space"

Voice Mail Message Waiting Indicator (Exchange 2010) does not work

Problem: for the user Message Waiting Indicator does not work - does not get lighten up when the voice mail is left.

Resolution:

1. Make sure that Outlook is running in online mode (Not Cached Exchange Mode).  In online mode Outlook will say "Online with Microsoft Exchange" in the status bar, not "Connected with Microsoft Exchange".
2. Delete the Voice Mail search folder in Outlook.  This only deletes the search folder, not the messages.
3. Dial into Outlook Voice Access to access your old voicemails.  You need to enter the "voice mail" command, even if OVA says you have no new voicemails.  When you do this, EWS will recreate the Voice Mail search folder in Outlook.  Hang up.
4. Reconfigure Outlook to use Cached Exchange Mode again and restart Outlook.  Since the OST header still matches the mailbox database header, Outlook will use the same OST and will resync your emails quickly and easily.

Reference article: http://www.expta.com/2012/01/how-to-reset-exchange-2010-mwi.html

Group Policy User/Computer Section

Login Script configured on the "User" section of GPO is applied to both Computer and Users objects, while expected to be applied only to User objects.