Exchange 2013 New User Settings

[ITGURU]

Hi

Hoping someone else has a similar setup and situation and how they got around it.

 

I have 2 types of Users - Staff and Students.

 

For Staff, I create the user(s) and select the Staff Mailbox Database. By default ActiveSync needs to be disabled but MAPI and OWA enabled. I don't seem to be able to find where I can set it as default for ALL new users.

 

For Students, I have activesync disabled, MAPI disabled and only OWA enabled. Then I need to set the students so that they can only receive from staff members.

 

I do all the above long winded was, but requires several powershell scripts running after creating the user.

 

For STUDENTS I do the following.

 

1. Create the mailbox with all the default settings

2. Go into the users account and change the OWA mailbox policy to 'Custom' - this disables photos in OWA so that students don't see them.

3. Run a powershell script which sets the mailbox features.

4. Run a powershell script which set the mailflow settings.

 

Is there any way I either set different settings per mailbox database, or a way to enter a new mailbox users 'alias' and then run the multiple scripts in one command?

 

Appreciate any help with this.

 

Thanks in advance.

[adamf]

You can't set the settings per mailbox database, they are per mailbox. Your alternatives are:

 

Create the mailbox as standard then run something like this: Get-Mailbox -Database "dbname" | Set-CasMailbox -ActiveSyncEnabled $false -MAPIEnabled $false -OwaMailboxPolicy "Custom"

 

Set-CASMailbox

 

It won't matter if there are mailboxes where that property is already set to false.

 

Stopping external emails reaching the student accounts, couldn't you do this with a transport rule, depending on how the email addresses are formatted? You could set up the transport rule and use a suitable regex to drop emails received from outside the organisation or for auditing purposes redirect them to a generic mailbox

 

 

For ActiveSync, set the ActiveSync organisation settings: From the EAC goto Mobile, Mobile Device Access and there is a button on the right hand side to edit the Exchange ActiveSync Access Settings. From there you can Allow, Block or Quarantine devices across the organisation. If you Quarantine you can specify admin email address that will receive notification when a device is Quarantined.

Edited August 30, 2015 by adamf

[howartp]

We have three powershell scripts that do all sorts with exchange every night.

 

Fundamentally they retrieve all AD accounts without a mail value (ie any new accounts) then enable the mailbox and apply similar settings as above.

 

We use the Company attribute in AD to control mailbox creation - a value of 'South Craven School' means they get Staff mailbox settings, a value of HideMe means they don't get a mailbox, and a value of 'Student' or null means they get student mailbox settings (and value is set to Student).

 

Students can send/receive from outside, but they're limited to 5 recipients and a low message size. Various transport rules intercept or redirect zips and banking/invoices/viagra that get through antispam.

[rpettit]

Hi Howart - this is something I was looking to do. Can you send me the powershell script? Obviously with all security info removed!!