My Technet

A lot expected from this feature as this has been a pain area for all Exchange administrators for years. Delegating the permissions to different people in a large organization based on the requirement, no less, no more!

In this post, I will cover creating a Role group for mailbox management tasks such as creating mailbox, deleting mailbox, DL etc. that is all user/group management within Exchange and scope the permissions based on the OU.

I will not cover the basics and details of RBAC and its components, for this you can look at following links.

http://technet.microsoft.com/en-us/library/dd298183.aspx

http://www.msexchange.org/articles_tutorials/exchange-server-2010/management-administration/exchange-2010-role-based-access-control-part1.html

When I looked to do it for myself and my org I came across following blog, which tells us how to do it via shell. nice stuff!

http://sysadmin-talk.org/2010/04/5-steps-to-heaven-creating-a-custom-rbac-role-in-exchange-2010/

Although I love shell, I was looking to do it via GUI. Why? It depends on my mood to use shell or EMC, until we have GUI around!

Ok, lets get started. Read the rest of this entry »

In this post, I am sharing a recent experience with Roaming profile and group policy.

Let’s assume the following scenario

UserA exists in OU OrgA

Group Policy applied on OrgA with c: drive blocked

UserA moved to OU OrgB

OrgB do not have any GPO which blocks c: drive

In a normal case, if you will update group policy on client or logoff and login, you should be able to see the the changes. In above example, c: should have been accessible.

However, the problem sometime may come that you still see that old GPOs/settings are getting applied. If you will run GPResult and look at the RSOP result, you find that GPOs from the new OU are being applied. Still, why we have settings from the GPOs on the old OU? Read the rest of this entry »

In this post, I will list down the links to the websites where I found interesting and useful information for techies.

• Below is the link which list commands to start various programs/mmc from command line, which is sometime very much needed and is also interesting.

http://www.websecurity.mobi/starting-snap-in-from-the-command-line/

• Below is the link to the excellent tool that can be used to troubleshoot MOC/Lync connectivity.

Roaming profile is a very good feature, most of us use it for years now and also face issues with it. Most of the times we get profile errors on client, very irritating “You have been logged on with temporary profile”.

Well, there are number of reasons for this and number of ways to correct this. However, all troubleshooting methods are waste if the basics are not in place. In this post, I will put together some of the best practices of configuring roaming profiles which can help you to avoid these issues.

Roaming profile Folder/Parent Folder

First step you do when configuring roaming profile Read the rest of this entry »