C.1 Provisioning Exchange Server 2003 Accounts

There are two different ways to provision the Exchange Server 2003 mailbox account with the Active Directory driver. You can set attributes on User objects so a Microsoft program (the Recipient Update Service) can use this information to provision to users to the Exchange database. You can also enable Collaboration Data Objects for Exchange Management (CDOEXM), which is the method documented in this section.

CDOEXM is an API that is provided by Microsoft. The Active Directory driver uses this API to provision the Exchange accounts.

With CDOEXM enabled, an Exchange Server 2003 mailbox is provisioned by setting the homeMDB attribute. When the homeMDB attribute is set, the driver automatically sets all required attributes. The driver can create, delete, and move mailboxes; however, it supports only interdomain moves.

The homeMDB attribute is set during initial configuration, but you can change the setting by modifying the driver policy. To find out the homeMDB attribute for your Exchange system, see Section 4.1, Gathering Configuration Information.

To configure the driver to synchronize an Exchange Server 2003 account:

  1. If the server that is running the driver is a non-Exchange server, make sure that the Exchange Management tool is installed on this server.

  2. Verify that the authentication account for the driver has enough rights to create, delete, or move Exchange accounts.

  3. If the driver is running on a member server, you must use SSL and you must run the Remote Loader service as a specific domain user with enough rights to delete, create, or move Exchange accounts.

  4. Run the Active Directory Discovery tool to find out what the homeMDB attribute is for the Exchange Server 2003 system. For more information, see Section 4.1, Gathering Configuration Information.

  5. Specify the configuration parameters to provision the Exchange mailboxes, when you are creating a driver object. See Table C-1 for a list of Exchange parameters. See Section 4.0, Creating a New Driver for information on how to create the driver object.

  6. Verify that you have selected CDOEXM to provision the Exchange Server 2003 mailboxes. In Table C-1, see Exchange Management interface type for more information.

Table C-1 Exchange Provisioning Configuration Parameters

Parameter

Description

Exchange Policy

Exchange provisioning can be handled by a driver policy, Entitlements, or skipped entirely. A user can be assigned a mailbox in Exchange (the user is mailbox enabled) or have information about a foreign mailbox stored in the Identity Vault record (the user is mail enabled).

When you are using entitlements, an external service such as the Workflow service or Role-Based Entitlements makes these decisions and the driver policy simply applies them.

Implement in policy uses the policies in the driver instead of entitlements to assign Exchange mailboxes. When you are using the driver policy, the decision to mailbox-enable or mail-enable a user, plus the Exchange message database where the account will reside, is controlled completely in the policy.

When None is selected, the default configuration does not create Exchange mailboxes but does synchronize the Identity Vault Internet E-Mail Address with the Active Directory mail attribute.

Exchange Management interface type

The driver cannot provision Exchange Server 2007, Exchange Server 2010, or Exchange Server 2013 and Exchange Server 2003 mailboxes in the same driver configuration at the same time. This option allows you to select which type of mailboxes the driver can provision.

CDOEXM synchronizes Exchange Server 2003 accounts.

IDM EXCH 2007 service synchronizes Exchange Server 2007 accounts.

IDM EXCH 2010 service synchronizes Exchange Server 2010 accounts.

IDM Powershell Service synchronizes Exchange Server 2013 accounts.

Allow Exchange mailbox move (yes/no)

When this option is enabled, the driver shim intercepts modifications to the Active Directory homeMDB attribute to move the mailbox to the new message data store.

Yes moves the Exchange mailbox.

No does not move the Exchange mailbox.

Allow Exchange mailbox delete (yes/no)

When this option is enabled, the driver shim intercepts removal for the Active Directory homeMDB attribute to delete the mailbox.

Yes allows the Exchange mailbox to be deleted.

No does not allow the Exchange mailbox to be deleted.

Default Exchange MDB

Specify the default Exchange Message Database (MDB). To obtain the correct name for the Exchange MDB, see Section 4.1, Gathering Configuration Information.

For example,

[CN=Mailbox Store (CONTROLLER),CN=First Storage Group,CN=InformationStore,CN=CONTROLLER,CN=Servers,CN=First Administrative Group,CN=Administrative Groups,CN=Domain,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=Domain,DC=com]

The driver can be updated to manage additional MDBs after the import is complete.