Thanks that answered the question exactly -----Original Message----- From: Coleman, Hunter [mailto:[EMAIL PROTECTED] Sent: Monday, August 18, 2003 3:11 PM To: Exchange Discussions Subject: RE: Use of DS/IS Consistency Adjuster
You're on the right track for clearing out the orphans (or zombies). http://support.microsoft.com/default.aspx?scid=kb;en-us;316886, specifically the section "Prepare Exchange Server 5.5 for Migration" Hunter -----Original Message----- From: Dave Vantine [mailto:[EMAIL PROTECTED] Sent: Monday, August 18, 2003 12:14 PM To: Exchange Discussions Subject: Use of DS/IS Consistency Adjuster In setting up a lab environment to test upgrading from 5.5 to 2000, I came across some issues with the IS that I did not expect to see. Over the last few years we have removed users from both the NT Sam and the Exchange DS. When a Recipient was removed from the DS, it removed the mailbox from the IS but it appears that any permissions that referenced that recipient (e.g. /O=CREATIVE COMPUTING, INC./OU=CREATCOMP/CN=RECIPIENTS/CN=RLB) in both the Public Folders and/or other users folders become "orphaned". As case in point, the above recipient was given explicit access to a number of folders in my Inbox and now that he has been removed, I now have these orphaned permissions. I have used the DS/IS Adjuster when using a recovery server to restore an individual mailbox to create the DS entries. In this case however I do not wish to create any missing entries but hope that I can use it to "Remove unknown user accounts from mailbox permissions" and "Remove unknown user accounts from public folder permissions" I have researched MS knowledge base and reviewed both Robichaux's and McBee's Exch 5.5 books and don't really see any prertinent information that indicates whether this is an appropriate use for it. Robichaux does indicate that this is a dangerous feature so thought I would seek the opinion of others. I could manually go through all of my folders and remove the permissions but I would have to also have everyone else in the organization perform this as well and thought this may be an automated way to remove these orphaned permissions. It seems that this would be a good step before trying to migrate. As a side question, is there a particular reason that the deletion of a recipient does not remove all references to them in the IS and not just their mailbox? _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
