RE: [ActiveDir] OT: RUS

[Clay, Justin \(ITS\)]

Thanks Al!   That’s so easy I’m a bit embarrassed J     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick Sent: Tuesday, June 13, 2006 8:28 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] OT: RUS   http://support.microsoft.com/?kbid=243629     Al   On 6/13/06, Clay, Justin (ITS) <[EMAIL PROTECTED]> wrote: Al,   I think that's great advice. I wish we really had a provisioning system, like MIIS or something similar. We have 22,000 users and they're all maintained by hand, which is horrible.   We have considered using a custom attribute to tag employees as well. We're definitely going to be using employeeType in the near future to at least identify service accounts and contractors/vendors. I think we might end up tagging other custom attributes as well. We currently tag a custom attribute with the user's Exchange quota limit so that our Exchange guys can use that attribute to set mailbox limits.   Since we're on the topic of UPNs, how are additional UPNs created and managed? There are about 15 additional UPNs in our UPN dropdown list that were created long before I was here, and honestly we don't need them. I believe at some point the previous admin was going to have a separate UPN for each department, such as police.domain.com, fire.domain.com, sheriff.domain.com. I'm not sure what the thinking behind that was (although I'm sure there was a reason) but we have no use for them at this point. How can I remove them or modify them?   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Al Mulnick Sent: Tuesday, June 13, 2006 7:41 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] OT: RUS   I think it's a really good idea to clean up the UPN's.  However, I think it worth noting that you may want to have a look at the process that provisions the users and creates those upn's.  Just to make sure you don't end up doing the work over and over again.   I realize upn alone will work, but I think it would be a good idea to consider tagging the user objects' custom attributes with some identifying information as well.  It may be that in the future you'll want to sort on different attributes and you may or may not be in a situation where upn is flexible enough.   Al   On 6/13/06, Clay, Justin (ITS) < [EMAIL PROTECTED]> wrote: We have 1 AD forest with 5 total domains. They are "sister" domains and they don't share a namespace. For instance we have one domain for our Police Department, one for the Sheriff Department, one for the Public Schools, etc.   As for Steven's suggestion for UPN, we were hoping to use that, but it looks like we'll have to do a lot of cleanup before we can. There's a lot of incorrect UPNs in our directory.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Al Mulnick Sent: Monday, June 12, 2006 5:36 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] OT: RUS   There're probably too many definitions of the word "domain" to really give good advice.  Can you expand that question?   On 6/12/06, Clay, Justin (ITS) < [EMAIL PROTECTED]> wrote: Would there be an easy way to write a RUS policy that stamped the email addresses based on what domain each user was in? This seems like it would be easy, but I don't see any attribute that I can get the domain from with an LDAP query.   Please tell me I'm missing something obvious!   Justin Clay ITS Enterprise Services Metropolitan Government of Nashville and Davidson County Howard School Building Phone: (615) 880-2573   ITS ENTERPRISE SERVICES EMAIL NOTICE The information contained in this email and any attachments is confidential and may be subject to copyright or other intellectual property protection. If you are not the intended recipient, you are not authorized to use or disclose this information, and we request that you notify us by reply mail or telephone and delete the original message from your mail system.   ITS ENTERPRISE SERVICES EMAIL NOTICE The information contained in this email and any attachments is confidential and may be subject to copyright or other intellectual property protection. If you are not the intended recipient, you are not authorized to use or disclose this information, and we request that you notify us by reply mail or telephone and delete the original message from your mail system.   ITS ENTERPRISE SERVICES EMAIL NOTICE The information contained in this email and any attachments is confidential and may be subject to copyright or other intellectual property protection. If you are not the intended recipient, you are not authorized to use or disclose this information, and we request that you notify us by reply mail or telephone and delete the original message from your mail system.   ITS ENTERPRISE SERVICES EMAIL NOTICE The information contained in this email and any attachments is confidential and may be subject to copyright or other intellectual property protection. If you are not the intended recipient, you are not authorized to use or disclose this information, and we request that you notify us by reply mail or telephone and delete the original message from your mail system.