Re: [ActiveDir] OT:Exchange mailnickname

[Al Mulnick]

<gets on soapbox>

Credentials should be unique within an organization.

Mail attributes, logons of any type, and any identifying information such as samaccountname, alias, cn, etc should be the same across a user for the sake of troubleshooting and preventing duplicates and the issues that come along with that.

</soapbox>

 

 

While it shouldn't matter, I have seen some cases that not having attributes match could be a problem.  There have been a lot of changes between versions around this behavior, but you never really know where in the legacy code this is going to come up. Even though it should not.

 

IIRC, one issue that comes to mind is that the LHS of the UPN was not the same as the alias field.  This resulted in the user being able to authenticate, but then could not render the data or to get partial access etc. via OWA.

 

If you check the troubleshooting docs for Exchange, you'll see that it's advised to troubleshoot with domain\user credentials when trying to figure out logon/display issues with OWA.  There's a reason for that. :)

 

My $0.04 (USD) anyway. 

 

On 6/9/06, Steve Rochford <[EMAIL PROTECTED]> wrote:

We make mailnickname=alias=samaccountname. I'm pretty sure that we started making most of this happen when we renamed accounts a long time ago (possibly NT4/Exchange 5.5 long ago!) because we did get problems if the alias wasn't the same as samaccountname.

 

We do have an email address matching samaccountname for students but that was just to make sure it was unique (9 James Taylors; 9 Bharat Patels amongst other duplicates!) but we don't for staff.

 

Steve

---

From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Tom Kern

Sent: 09 June 2006 15:53
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] OT:Exchange mailnickname

 

Thanks.

What about mailNickname?

Are there any issues if mailNickname is different than sAMAccountName in re: to WebDAV?

 

Thanks again

 

On 6/9/06, Coleman, Hunter <[EMAIL PROTECTED]> wrote:

Empirical evidence suggests that he shouldn't be insisting so much. Very few of our users have a proxy address of [EMAIL PROTECTED], and we have no problems getting to subfolders via OWA. I'm sure you could take a test user account in your environment and duplicate this.

---

From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Tom Kern
Sent: Friday, June 09, 2006 7:41 AM
To: activedirectory
Subject: [ActiveDir] OT:Exchange mailnickname

 

My company wants to use a mail stubing app called "Mailbox Manager" from CA.

 

I've been going back and forth with the tech there.

He claims that, according to him, due to a limitation in WebDAV, one of the user's proxy addresses needs to be in the format of [EMAIL PROTECTED], for users to be able to see subfolders underneath their inbox in OWA.

I've never heard of such a limitation and think he may be talking about "mailnickname"(alias), but he inisits I'm wrong.

 

Can anyone shed some light on this?

 

Thanks