In Chapter 10, "Managing Recipients," we will go in to a lot more detail on recipient administration. For now, we want to introduce the Recipient Configuration work center of the Exchange Management Console and the show you many of the recipient management EMS cmdlets. Recipients management is most easily performed using the Recipient Configuration work center of the EMC (see Figure 8.23).
Figure 8.23: Managing Exchange 2007 recipients using the Exchange Management Console
For many medium and large businesses, the EMS will prove most useful for managing mail-enabled recipients. For that reason, we wanted to provide a fairly comprehensive list of the EMS cmdlets available. In the following sections, we will review the management of each type of recipient and provide you with a list of the EMS cmdlets that can be use for each.
If you select the Mailboxes subcontainer of the Recipient Configuration work center of the EMC, you can see just the mailbox-enabled users in the organization. This could potentially be a pretty big list, so you can apply filters to narrow the scope of the list to just what you want to see. From here, you can select the properties of a mailbox (such as those shown in Figure 8.24).
Figure 8.24: Managing a mailbox's properties using the Exchange Management Console
The mailbox properties you see in Figure 8.24 include attributes of the user account that are not really Exchange specific. For example, you can change information such as telephone numbers, department, web page, address, manager, and office location. There are quite a few tasks and actions you can perform against a mailbox and not all of them can be performed via the graphical user interface. The following list includes some of these tasks:
Managing user account attributes such as phone, address, and organization properties
Moving mailboxes to another mailbox store (or even another Exchange organization)
Assigning storage limits, messages size limits, recipient limits, and deleted item retention settings for a mailbox
Defining message delivery restrictions and e-mail forwarding options
Enabling web service features such as ActiveSync and Outlook Web Access as well as enabling or disabling MAPI connectivity
Assigning ActiveSync and messaging records management policies to a mailbox
Managing permissions that other users have to a mailbox
Managing the ActiveSync devices associated with a mailbox
Let's take a look the cmdlets that are used to manage mailboxes and user accounts:
Cmdlet | Description |
---|---|
Get-User | Retrieves account information about a user in the Active Directory |
Set-User | Sets the properties of a user account |
Get-Mailbox | Retrieves mailboxes and properties of mailboxes |
Get-MailboxStatistics | Retrieves mailbox storage statistics for a mailbox database or a specified mailbox |
Get-MailboxFolderStatistics | Retrieves mailbox folder statistics for a specified mailbox |
Get-MailboxCalendarSettings | Retrieves the Calendar Attendant settings for the specified mailbox |
Get-UMMailbox | Retrieves the Unified Messaging properties for the specified mailbox |
Get-CASMailbox | Retrieves the Client Access server properties for a specified mailbox |
Get-MailboxPermissions | Retrieves the permissions that are assigned or inherited for the specified mailbox |
Get-UMMailboxPIN | Retrieves a Unified Messaging PIN for the specified mailbox |
Move-Mailbox | Moves a mailbox from one mailbox database to another |
Connect-Mailbox | Reconnects an existing user account to a mailbox that was previously deleted |
Enable-UMMailbox | Enables a mailbox to support Unified Messaging |
Restore-Mailbox | Copies mailbox data from a recovery storage group to the production mailbox location |
Export-Mailbox | Exports mailbox content to an alternate location |
Remove-ActiveSyncDevice | Removes an ActiveSync device that is associated with the specified mailbox |
Clear-ActiveSyncDevice | Performs a remote wipeout of the specified ActiveSync device the next time it connects |
Get-ActiveSyncDeviceStatistics | Retrieves usages statistics and device information about the specified ActiveSync device |
New-Mailbox | Creates a new user account and mailbox |
Enable-Mailbox | Enables an existing user so that it has a mailbox |
Remove-Mailbox | Deletes the specified user account and mailbox |
Disable-Mailbox | Removes a mailbox from the specified user but does not delete the use account |
Set-Mailbox | Sets mailbox properties |
Set-UMMailbox | Sets Unified Messaging-related properties on a mailbox |
Set-CASMailbox | Sets Client Access server-related properties on a mailbox |
Add-MailboxPermission | Adds permissions to a mailbox |
Remove-MailboxPermission | Removes permissions from a mailbox |
Set-UMMailboxPIN | Sets the Unified Messaging PIN for a mailbox |
Disable-UMMailbox | Disable a mailbox's UM features so that it no longer supports Unified Messaging |
New-MailUser | Creates a new user account and associates an external e-mail address with that user |
Enable-MailUser | Associates an external e-mail address with an existing user account |
Remove-MailUser | Removes a mail-enabled user account from the directory |
Disable-MailUser | Removes an external e-mail address that is associated with a user |
Get-MailUser | Retrieves a list of mail-enabled users or properties of mail-enabled users |
Set-MailUser | Sets properties of a mail-enabled user account |
Mail-enabled groups are managed from the Distribution Group subcontainer of the Recipient Configuration work center. From here you can create new Active Directory groups, mail-enable existing groups, and edit the properties of existing groups. One of the more common tasks an administrator performs on mail-enabled groups is to add or remove members. Figure 8.25 shows the Members property page of a mail-enabled group.
Figure 8.25: Managing the membership of a mail-enabled group
Here is a list of tasks you may need to perform on mail-enabled groups:
Managing group membership
Configuring messaging restrictions such as maximum message size and who can send mail to a group
Specifying if a group can receive anonymous messages
Assigning additional SMTP addresses for a group
Configuring an expansion server
Configuring delivery report behavior
If you want to manage mail-enabled groups from the EMS, here are some of the cmdlets available:
Cmdlet | Description |
---|---|
Set-Group | Manages the properties of a security or distribution group |
Get-Group | Retrieves a list of security and distribution groups (regardless of mail-enabled status) in the Active Directory |
Enable-DistributionGroup | Mail-enables an existing group in the Active Directory |
Disable-DistributionGroup | Disables the mail features of an existing group but does not delete it |
New-DistributionGroup | Creates a new group in the Active Directory and mail-enables it |
Remove-DistributionGroup | Deletes a mail-enabled group from the Active Directory |
Set-DistributionGroup | Sets the properties of a mail-enabled group |
Get-DistributionGroup | Retrieves a list of mail-enabled groups or the properties of specified mail-enabled groups |
Add-DistributionGroupMember | Adds a user to a mail-enabled group |
Get-DistributionGroupMember | Retrieves the membership of a mail-enabled group |
Remove-DistributionGroupMember | Removes a member from a mail-enabled group |
New-DynamicDistributionGroup | Creates a new dynamic distribution group |
Set-DynamicDistributionGroup | Sets the properties of a dynamic distribution group |
Get-DynamicDistributionGroup | Retrieves a list of dynamic distribution groups or the properties of a specific dynamic distribution group |
Remove-DynamicDistributionGroup | Deletes a dynamic distribution group |
For more information on mail-enabled group management, see Chapter 10, "Managing Recipients."
Mail-enabled contacts appear in the Exchange global address list, but they do not need to be security principals. You can use the EMC to create and manage enabled contacts in the Mail Contacts subcontainer of the Recipient Configuration work center. Figure 8.26 shows the E-Mail Addresses property page of a mail-enabled contact. This page includes the e-mail addresses that will be accepted for this recipient as well as the external e-mail address of the recipient (the address to which the message will be forwarded).
Figure 8.26: Managing a mail-enabled contact's e-mail addresses
Mail-enabled contacts can be managed from the EMS as well as the EMC. Here are the EMS cmdlets you can use for managing mail-enabled contacts:
Cmdlet | Description |
---|---|
Get-Contact | Retrieves the contacts from the Active Directory or retrieves the properties of specified contacts |
Set-Contact | Sets the properties of a contact in the Active Directory |
Enable-MailContact | Mail-enables an existing Active Directory contact |
Disable-MailContact | Disables the mail attributes for an Active Directory contact but does not delete the contact |
Remove-MailContact | Deletes a mail-enabled contact from the Active Directory |
Get-MailContact | Retrieves a list of the mail-enabled contacts in the Active Directory or the properties of specified contacts |
Set-MailContact | Sets the properties of a mail-enabled contact |
You can find more information on creating and managing mail-enabled contacts in Chapter 10, "Managing Recipients."
One thing that tends to confuse experienced Exchange 2000/2003 administrators is that there is not an Exchange Server 2007-based graphical user interface for managing public folders. This means that either you have to keep a copy of the Exchange 2003 System Manager program running or you have to manage the public folder properties entirely from the Exchange Management Shell. Here is a list of the EMS cmdlets that can be used to manage public folders:
Cmdlet | Description |
---|---|
Remove- PublicFolderClientPermissions | Removes client permissions from a public folder |
Add- PublicFolderClientPermissions | Adds client permissions to a public folder |
Get- PublicFolderClientPermissions | Retrieves a list of client permissions for a public folder |
Get-PublicFolderAdministrativePermissions | Retrieves the public folder administrative permissions |
Add-PublicFolderAdministrativePermissions | Adds administrative permissions to a public folder |
Remove-PublicFolderAdministrativePermissions | Removes administrative permissions from a public folder |
New-PublicFolder | Creates a new public folder |
Remove-PublicFolder | Deletes a public folder |
Get-PublicFolder | Retrieves public folders or the properties of specified public folder properties |
Set-PublicFolder | Sets public folder properties |
Enable-MailPublicFolder | Mail-enables a public folder |
Disable-MailPublicFolder | Disables mail properties of a public folder |
Get-MailPublicFolder | Retrieves a list of mail-enabled public folders or properties of a mail-enabled public folder |
Set-MailPublicFolder | Sets mail-enabled public folder properties |
Update-PublicFolder | Forces an update of public folder content |
Update-PublicFolderHierarchy | Forces an update of the public folder hierarchy |
Get-PublicFolderStatistics | Retrieves public folder statistics |
You can find more information about public folder man in Chapter 14, "Public Folder Administration."