Jump to content

Recommended Posts

Posted
Were having issues with our disabled AD accounts getting their mailboxes deleted! we've got ILm configured to do the account creation and password sync. but we've just noticed that if we disable user accounts they are getting deleted!!!! what do you guys have set in the deprovisioning section of ILM? Ours seems to be set to determind with rule extensions - sure it should be set to make them disconnectors! think some ones been tinkering!

 

Not sure of the fix, but i'm sure i read somewhere that a deleted mailbox is available for undeletion for up to a month, it may even have been 2 months.

Posted
thanks for the quick reply vikpaw - i've checked using powershell but the mailbox has completley gone - if we enable the account again and run the sync it recreates a new mailbox! all the mail gone!!!
Posted
Were having issues with our disabled AD accounts getting their mailboxes deleted! we've got ILm configured to do the account creation and password sync. but we've just noticed that if we disable user accounts they are getting deleted!!!! what do you guys have set in the deprovisioning section of ILM? Ours seems to be set to determind with rule extensions - sure it should be set to make them disconnectors! think some ones been tinkering!

 

Mine is set to the same. I have however not yet looked at decomissioning old accounts and its something Im going to be looking at soon. Also, I havent noticed if it deletes disabled users.. I will do some tests..

Posted
thanks for the quick reply vikpaw - i've checked using powershell but the mailbox has completley gone - if we enable the account again and run the sync it recreates a new mailbox! all the mail gone!!!

 

Log a support call just in case, i'm certain i got an email or read somewhere about this feature. Maybe it's not available to you, but if you log a case, they can do something in the backend.

Apologies in advance if i'm wrong and am falsely getting your hopes up.

Posted
Yep i've got a case logged Its just been escalted to the senior support team! Rabbie you are yours set to determined with extension rules on both the hosted and onpremises?
Posted

I disabled some accounts yesterday and Ive just checked (using the get-mailbox cmdlet) and its still showing a mailbox.

 

After how long being disabled were the mailboxes deleted?

Posted

Thanks for the replies guys - something strange going on! - so you've all got the deprovisioning settings set to detemind with rules extension on the hosted and on premise agents?

 

Just as a matter of interest how often to you guys run the startsync script?? ours has been scheduled to run every 30 mins from 8 till 8.

Posted (edited)

whoops, there was supposed to be a link in that post!

 

Backup or restore options for Live Users - Outlook Live Answers

 

just edit it now as well.

 

p.s. we don't use the system actively, i've just put around 10 test users on there, via csv, for playing around with, only 3 actively use it.

 

Live is set up with a new domain, and the current domain hosted in school is added as an additional one. So i redirect all my mail to the live servers and can pick it up on my iphone without having the hassle of the NM allowing me in from outside past cisco, firewall, proxy.

 

With current domain as added additional one, i can get all replies to the school server and it gives me that as my reply-to address :) so no-one knows i'm using the live service.

Edited by vikpaw
addition
Posted
Thanks for the replies guys - something strange going on! - so you've all got the deprovisioning settings set to detemind with rules extension on the hosted and on premise agents?

 

Just as a matter of interest how often to you guys run the startsync script?? ours has been scheduled to run every 30 mins from 8 till 8.

 

just the default 2 hours.. but no, ctually, on the OnPremise its set to Make them Disconnectors.. Sorry i only checked the hosted the last time.

Posted

@staylor1972:

 

If you open ILM and click on Tools -> Metaverse Designer

 

then Actions -> Configure Object Deletion Rule

 

What is it set to just now?

 

Ours is set to the top option, "Delete metaverse object when last connector is disconnected"

 

However, once we want to start having ILM replicate deleted AD accounts, we change to the middle option "Delete metaverse object when connector from this management agent is disconnected" and change the drop down to OnPremise..

Posted

Hi all

 

I have a few questions that maybe some of you can answer - firstly if you havent seen it i have a thread here asking for advice on distribution lists http://www.edugeek.net/forums/how-do-you-do/70418-live-edu-distribution-address-lists.html

 

I also have some specific questions that some of you may be able to answer...

 

- Seperating Staff and Pupil mail, i have read that a subdomain is no good for this as pupils will still be able to see staff on the GAL. Apparently you need a new domain for the pupils and then set mailbox as the disabled view option so they cant see any GALs. Then you add external contact lists for the pupil emails onto the staff domain setup? Is this correct? i want Staff to see all GALs but pupils to not see any. Current domain is [email protected] whereas a new one for pupils would be [email protected]. I had tried adding a new domain of pupils.schoolname.co.uk but imy domain provider said that would be a subdomain and therefore wouldnt work how i wanted it. How have people here done it?

 

- AD population, we dont have any onsite exchange etc we currently use a web based email client. So in AD none of the users have populated email addresses. To import test accounts i exported user details into correct format and also added my own column for Email and using the concatenate formula in Excel created email address along the lines of [email protected]. I then imported them fine - now thats fine and worked well but in future i would like to use ILM and Olsync. But as AD isnt populated with staff email addresses i think ill have a problem. Is there an easy way of populating AD with email addresses from live@edu or a csv file? Stuart on the other thread mentioned dsmod as a way to do it?

 

Im also looking at adding a cname alias so that when going to mail.schoolname.co.uk it directs you to outlook.com for the sign in. It seems though that this cannot be customised at all and only option is to setup a SSO page you can customise. Has anyone got around this or am i stuck with the boring outlook.com sign in page?!?

 

Thanks

James

Posted

On the latter two points, the dsmod command or other tools out there will populate AD with whatever you need.

 

As for the cname, the live@edu setup instructions just tell you how to put in the redirect for mail.schoolname.co.uk. Not sure customisation is possible, at least not easily. You can customise stuff in the site once logged in. At the moment for test users i'd told people if they forget the new domain, to go to hotmail and it just works. Also on logout, it takes them to our school website. There must be an api of somesort that will let you create a custom interface and log into hotmail/live@edu through your own page.

 

All the guides i've read, do examples using subdomains. Is pupils seeing staff a problem? Our staff emails are fairly public / easily predicted, so it's not much benefit blocking the address list.

  • Thanks 1
Posted
On the latter two points, the dsmod command or other tools out there will populate AD with whatever you need.

 

As for the cname, the live@edu setup instructions just tell you how to put in the redirect for mail.schoolname.co.uk. Not sure customisation is possible, at least not easily. You can customise stuff in the site once logged in. At the moment for test users i'd told people if they forget the new domain, to go to hotmail and it just works. Also on logout, it takes them to our school website. There must be an api of somesort that will let you create a custom interface and log into hotmail/live@edu through your own page.

 

All the guides i've read, do examples using subdomains. Is pupils seeing staff a problem? Our staff emails are fairly public / easily predicted, so it's not much benefit blocking the address list.

 

That last point made me think a bit, tested it as student and current email system allows pupils full access to staff lists and addresses so in reality there may be no need to seperate them.

 

I will look into dsmod for the AD population

Posted

had a whole bunch of students come to us today that the live@edu plugin for moodle has stopped working. It takes them to the live@edu login page, but then doesnt take them back to moodle, it presents some moodle page about the liveid not being found or something..

 

Is anynoe else experiencing this issue, or has our moodle admin been messing with things (moodle etc is a diff dept to IT)

Posted

Still going on our site, just logged in with a test account and also seen a student online. Try these steps to make sure all is OK...

 

- check no-one has enabled co-branding as this interfered with my login flow (not sure if the bug was fixed but haven't wanted to try and find out!)

- check that your AppID is still correct and alive

- create a new account on Live@Edu and Moodle and see if that signs in correctly

 

I know MS are doing upgrades on the infrastructure at the moment so it's possible it may have broke something, it's happened before with similar errors to what you're experiencing :(

  • Thanks 1
Posted

I dont have access to moodle its run by a compltetly different department from IT.

 

Co-branding was enabled at day 1 and has been working flawlessly.

 

The thing is, when we first installed the plugin I had to hack a piece of php of the plugin to get it to work with our moodle. Im just wondering if oiur moodle guys have maybe upgraded / reinstalled moodle or somehitng and havent re-hacked this bit of code.

 

Also, is there a new plugin? It seems they might have upgraded it in the last few months?

 

Im not sure what the AppID is though?

  • 1 month later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...