jonnyfive

You will also have to envoke ADSIEdit and edit the offending machine from the EXCHANGE SERVERS container.

Sounds like you need to setup RPC over HTTP, get a UCC certificate for your domain, apply it within IIS, and setup users home PC outlook to connect via RPC over HTTP..... Otherwise users at home with HAVE to use OWA. If you need guidance setting that up... I can do it in my sleep...

One last thing... The following is the actual snippit from our term script that is calling the individual user to be terminated's email address... Notice there is a call to LDAP with predefined scopes.. In here somewhere, could I insert something that will just piggyback off of this LDAP call and clear the AD property along with it's clearing of the SMTP and x400 addressess?? Dim objUser, entry eAddresses = "" set objUser = GetObject("LDAP://"& g_sDN) For Each entry in objUser.GetEx("proxyAddresses") If instr(entry,"X400") = 0 Then eAddresses = eAddresses & entry & " , " end if Next eAddresses = Replace(eAddresses,"smtp","") eAddresses = Replace(eAddresses,"SMTP","") eAddresses = Replace(eAddresses,":","") WriteLog "SMTP Email Addresses: " & eAddresses sbEmail.Add "SMTP Email Addresses: " & eAddresses & vbcrlf if err.number <> 0 then 'errorHandler "Get SMTP Info Failed ", hex(err.number), err.Description, false WriteLog "Unable to get SMTP info" err.clear end if

Scratch that... In the test bed it did not work... Which does not suprise me... I tested it on a test OU live.. and it worked flawlessly. I am curios however, as to why the PS didn't work... Again, probably a test bed thing.

With the VB script I get a General access denied... It seems to work for all the accounts except the last one... The "Next" is seeming to hang it up.. And my account is Admin, Domain Admin, Enterprise Admin, Org Manager, Schema Admin.... So I don's see permissions as an issue...

Tried Powershell and got this: The term 'Get-QADUser' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:12 + Get-QADUser <<<< -SearchRoot 'lab.fhdevlab.com/Terminated Users' | Set-QADUser -ObjectAttributes @{mail=$null} + CategoryInfo : ObjectNotFound: (Get-QADUser:String) [], CommandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException ???? Will try VB now.. Thanks again

Will try tomorrow morning. Thank you all for such good input. And yes, explanation helped out. J

@steve.... I am not wanting a single user.. I am wanting EVERY user within the OU after the Term script places the user in the Terminated Users OU.... Here is another script I tried that WORKS... but the email address is " " which is a space... What is the correct way to put no values in the field? See the following: On Error Resume Next Const ADS_SCOPE_SUBTREE = 2 Set objConnection = CreateObject("ADODB.Connection") Set objCommand = CreateObject("ADODB.Command") objConnection.Provider = "ADsDSOObject" objConnection.Open "Active Directory Provider" Set objCommand.ActiveConnection = objConnection objCommand.Properties("Page Size") = 1000 objCommand.Properties("Searchscope") = ADS_SCOPE_SUBTREE objCommand.CommandText = _ "SELECT AdsPath FROM 'LDAP://OU=Terminated Users,DC=corp,DC=fleishman,DC=com' WHERE objectCategory='user'" Set objRecordSet = objCommand.Execute objRecordSet.MoveFirst Do Until objRecordSet.EOF Set objUser = GetObject(objRecordSet.Fields("AdsPath").Value) strEmailAddress = objUser.Mail strEmailAddress = LCase(strEmailAddress) objUser.Mail = " " <------That is where the SPACE is for email.. Blanks it out, but I have a feeling it is not correct.. How can I VOID value out...... objUser.SetInfo objRecordSet.MoveNext Loop

Our term process is automated... Yes, your method works, if I want to babysit AD every two minutes(this is a HUGE company).... That is how I initially cleared them out... But when our main term script runs, this field is not cleared. Thus bringing me to this question. Thank you though

Hey Guys?Gals, First post.. Hopefully I can gain some information as well as contribute.... Right now, I am facing this: I have a mixed AD setup.. Meaning servers with 2003 and servers with 2008... We have a process of terminating users.. Their mailbox gets archived, moved to termed OU, ect... However, each user is retaining the EMAIL address on the general tab of the AD properties of each user. What I am needing is a VB script that will clear everybodies EMAIL from the General tab. I have tried this: Const ADS_PROPERTY_CLEAR = 1 Set objContainer = GetObject _ ("LDAP://ou=Terminated Users,dc=corp,dc=CorpName,dc=com") objContainer.PutEx ADS_PROPERTY_CLEAR, "mail", 0 objContainer.SetInfo That does not work. Well.... It executes without any errors. But when I check users email portion on the general tab within the terminated users OU, they still have the mail address filled in. I HAVE waited, refreashed, and replicated all DC...... Any ideas??