I'm not sure what I was trying to say either! 
 
I think I was trying to say how to I use the GUI with the checkboxes to
get the same results as the LDAP query. I have around 7 of these to
setup. I would prefer to use the GUI and the checkboxes.
 
jb

________________________________

From: Michael B. Smith [mailto:mich...@owa.smithcons.com] 
Sent: Tuesday, June 23, 2009 3:58 PM
To: MS-Exchange Admin Issues
Subject: RE: recipient policy help


You can go into advanced view to edit the LDAP query directly.
 
I don't understand "remote the query for any contact and any PF,DL, or
DDL" to be able to answer it.
 
________________________________

From: Jason Benway [benw...@jsjcorp.com]
Sent: Wednesday, June 17, 2009 10:51 AM
To: MS-Exchange Admin Issues
Subject: RE: recipient policy help


anyone?

________________________________

From: Jason Benway [mailto:benw...@jsjcorp.com] 
Sent: Thursday, June 11, 2009 4:01 PM
To: MS-Exchange Admin Issues
Subject: RE: recipient policy help


I'm using the GUI in exchange 2003 to create these policies. Not sure
how to edit the ldap directly though the GUI, or which boxes to check to
remote the query for any contact and any PF,DL, or DDL
 
thanks,jb

________________________________

From: Eric Woodford [mailto:ericwoodf...@gmail.com] 
Sent: Thursday, June 11, 2009 12:59 PM
To: MS-Exchange Admin Issues
Subject: Re: recipient policy help


Your LDAP logic is a wee-bit off.. If I am reading this correctly, it
says 
 

any mailenabled object that's:

*       any mailbox not on any server 
*       any mailbox on IZZYEmail 
*       any contact 
*       any PF, DL or DDL

 
(&
   (&
        (& (mailnickname=*) 
        (| 
            (&
                (objectCategory=person)
               (objectClass=user)
               (!(homeMDB=*))
               (!(msExchHomeServerName=*))
            )
          (&
              (objectCategory=person)
              (objectClass=user)
 
(msExchHomeServerName=/O=ghsp/OU=Belton/cn=Configuration/cn=Servers/cn=I
ZZYEMAIL)
           )
          (&
              (objectCategory=person)
              (objectClass=contact)
           )
          (objectCategory=group)
          (objectCategory=publicFolder)
         (objectCategory=msExchDynamicDistributionList) 
))))

 
I think you want something more like:
- Any mail enabled object, on IZZYEMAIL that is a mailbox, contact,
group, PF or DDL. 
 
(&(mailnickname=*) 
 
(msExchHomeServerName=/O=ghsp/OU=Belton/cn=Configuration/cn=Servers/cn=I
ZZYEMAIL)
     (|
        (&(objectCategory=person)(objectClass=user) )
       (&(objectCategory=person)(objectClass=contact))
       (objectCategory=group)
       (objectCategory=publicFolder)
       (objectCategory=msExchDynamicDistributionList) 
    )
)
 
To shorten that a bit more, since you're hitting all mail enabled
objects on the server:
 
(&(mailnickname=*)
(msExchHomeServerName=/O=ghsp/OU=Belton/cn=Configuration/cn=Servers/cn=I
ZZYEMAIL))
 
will do approx. the same thing. 

 
On Thu, Jun 11, 2009 at 6:31 AM, Jason Benway <benw...@jsjcorp.com>
wrote:


        I created new recipient policies to replace the legacy one's
from our 55 days. During that process I had to add another domain for
our of our business units. So I did an apply to all.
        We have 5 different exchange servers and I have 11 recipient
policies.
         
        The users are being stamped and created correctly, but the DLs
are only being stamped with the #1 policy. Here's the ldap from that
policy.
         
        (&(&(& (mailnickname=*) (|
(&(objectCategory=person)(objectClass=user)(!(homeMDB=*))(!(msExchHomeSe
rverName=*)))(&(objectCategory=person)(objectClass=user)(msExchHomeServe
rName=/O=ghsp/OU=Belton/cn=Configuration/cn=Servers/cn=IZZYEMAIL))(&(obj
ectCategory=person)(objectClass=contact))(objectCategory=group)(objectCa
tegory=publicFolder)(objectCategory=msExchDynamicDistributionList) ))))
         
        I believe this should stamp all objects, but only on the
izzyemail server, correct?
         
        but it seems to be stamping DLs on all emails servers!! 
         
        thanks,jb
         

        Jason Benway
        System/Storage Engineer 
        616-847-8474 telephone
        616-850-1208 fax
        www.jsjcorp.com <http://www.jsjcorp.com/>  
         JSJ Corporation
700 Robbins Road
Grand Haven, MI 49417   
________________________________

This message may contain confidential and/or privileged information. If
you are not the addressee or authorized to receive this for the
addressee, 
you must not use, copy, disclose or take any action based on this
message or any information herein. If you have received this message in
error, 
please advise the sender immediately by reply e-mail and delete this
message. Thank you for your cooperation. 

         

         


 

 

 

 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~             http://www.sunbeltsoftware.com/Ninja                ~

<<JSJ_Email_Bruce.jpg>>

Reply via email to