maf_001

Hi, If your students are just using OWA you can restrict the address book to look at a OU within AD see, XCCC: How to Restrict OWA Address View Searches You can use a tool like ADModify to bulk change the value for all your users. As for restriction students from emailing staff i know this is possible in exchange 2007, but i cannot remember if it is possible in 2003 In 2007 you can apply delievery restirictions on a per mailbox lvl, so you can say Reject messages from teh group "Students" which would just bounce all emails from students. Hope this part helps Mark

Hi Matt, Unfortunatly i dont know a way to display the Quota on the desktop, but I do have a nice VBS script that I used to place on the sutdents Desktop that caluculated all the folders in the H:\ and the sizes and outputed it to a Excel file in the H:\ The students can then see how much room each folder is using and the total size that thier H:\ I know it is not the best soulution, but if you cannot get a another way let me know and I will give you teh VBS script. Mark

Hi Uraken, To filter emails based on key workds using exchange 2007, you need to do the following steps: Create and populate a group for all your students. in this example i am going to use a group called "Pupils" They is 2 ways you can create the new rules i will show you the EMC way incase you are not familiar with powershell. Open EMC -> Organzational Config -> Hub Transport -> Transport Rules Select New Transport Rule Give your rule a name Conditions, check -> "Sent to a member of distribution Group" and then choose your pupils group. Then check -> "when the Subject field or the body of the message contains text patterns" then enter the key words you wish to block. Actions -> you can either check "silently drop the message" or i prefer "Send bounce message to sender with enhance status code" The choice is yours but i never like to drop messages with out knowing why, also you can customise the NDR if you choose send bounce back. Exceptions -> by default you do not need to select any but you may find you would like an exception. The only warnig i would give with this method is that if you filter a word like "cum" then it would filter the word "cucumber" so be very carful when adding words. Once the rule has been created depending on your enviroment it should take no more than 5mins to apply. This is a basic way of filting key words using Transport Rules and the Exchange Managemanet Console. Hope this helps, Mark

If you open Exchange Powershell and type get-help New-GlobalAddressList it will tell you how to add a recipient filter. You can control the OWA addy lookup by changing the msExchQueryBaseDN vaule in AD for your users This is a OU lookup, e.g. OU=Students,Ou=Users,DC=Mydomain,DC=com for students OU=Staff,Ou=Users,DC=Mydomain,DC=com for staff assuming your users are in OU's like this Users -> Pupils -> Staff if you set this to a root OU it will search all the sub ous for mail enabled users So as above your staff would be looking at the Staff OU and would see only staff and your pupils would be lokoing in Students for users. The Gals are for Outlook distribution, if you want to seperate them it comes under the Exchange Hosted setup, because you are trying to sperate the users as if they where in a different company. This is a massive config change and is very hard to keep up with. I would reccommend allowing your pupils OWA only access and staff access to both. This is a bit of a pain to get working and manage but can be configured to be all scripted, let me know if you need anymore help, Hope this Helps Mark

Hi, Yes this is possible but it is more important to understand what you are trying to achieve. Why do you want 2 GAL's? How do your users connect to exchange? This is what i am guessing, If you are in a normal school enviroment your staff will be using Outlook and pupils using OWA i would have thought. To create a new GAL and OAB you need to do the following, the powershell commands are on the end, Create a new GAL that has just the users you want using: New-GlobalAddressList Create an Address list with the same name: New-AddressList Create an offline address book for the new GAL: New-OfflineAddressBook Once you have done this you should have 3 GALS, addresslists and OAB's Staff Pupils, and default. You can force outlook to pickup the staff GAL by using group policy, and the users will be able to see the pupils address list in the dropdown. If that is what you are aiming to do. Hope this helps, Mark (sorry my spelling is so bad, i am just a bit rushed during the day)

You have a few options to get around this, the solution below is how my product configures address books for schools which we have found seems to be the best way around this, Staff have access to Outlook and OWA Staff are given access to the default GAL which includes everyone in your school Staff are given an alias of title.surname e.g. [email protected] Pupils are give OWA access only, Pupils are modified using Admodify (or any AD modification tool) to only be allowed to see other pupils in the school. (if you need to know what you need to change to restrict the lookups let me know.) If pupils then need to contact a member of staff via Email they simply email the teacher as they would call them in lesson, [email protected] The only problem with this way is that as soon as the member of staff replies it will return the staff members display name on the email. They is a few other ways you can maniplulate exchange, if you need anything else let me know. Mark

The address book is generated from the Display Name attribute in AD, if you where to change the Dispaly Name for your staff it would reflect in your GAL. This would also reflect in emails, any email sent by a staff member would appear to come from e.g. Mr J Smith I host Email for allot of schools and most schools are happy with just initial surname, e.g. J Smith. Hope this helps, Mark

I am modifying some AD values using powershell, below is part of a standard update for AD, but i am trying to add multiple values for otherIpPhone, can anyone help me with the code that i need to do this? $url= "sometexthere" $objUser = [ADSI]"LDAP://CN=$cn,OU=$usertype,OU=$fullname,DC=domain,DC=co,DC=uk" $objUser.put("otherPager", "$url") $objUser.put("otherIpPhone", "$membertype") $objUser.setInfo() The values are all populated in my full script this is just a cut out, The only other way I can think to do this is to pipe the update into admodify command line tool. I have a vbs script to do this but i need to do this via powershell if possible, Thanks Mark

Hi, I managed to filter all the proxy bypass sites using ISA 2006, the easiest way is to filter all Https traffic. Then just have an allowed list for the trusted sites that they need Https to. I found that the pupils didnt need access to that many Https sites. I am not the biggest fan of bulk blocking when it comes to filtering, but this way worked for me. Mark

I have a few customers connecting to my Exchange server 2007 using Apple Mail, i had to enable IMAP connectivity. You can turn POP3 on too if you wanted but POP3 will remove the emails from the server. I wouls use IMAP. Mark

Just another thought, might be worth checking the Firewall rules, i think when i updated one of my CAS servers, it closed some exchange ports. You mentioned you upgraded to SP2, it might have reset your firewall policy on your exchange server. Mark

Hi, To run tests against your Exchnage server from Exchange powershell: Test-OutlookWebServices -ClientAccessServer "CASServer01" also try using https://www.testexchangeconnectivity.com/ This site will tell you whats going wrong. If you need anymore help trouble shooting let me know. Mark

You can manage key word filters using Exchange 2007 transport rules, you don’t need any addition software to do this. If you would like examples please let me know. Alternatively you can always outsource your email to a hosted solution like School Email that will allow you to manage blocked words and has bully and key word filtering built in. Mark

You need to add the feature called Desktop Experiance, this will install Windows Media Player.

I used to use a Dell PE 2900 for a storage drive for student data. Spec: 2* Quad 2.4Ghz 8Gb RAM Dell Perc 5i Card 5* 146Gb SAS - For data 2* 74GB SAS - for OS 2* 1Gb Ethernet This work great for me, I had 1500 pupils with over 600 pupil computers which got used all the time, I wouldnt go splashing your money on a fancy SAN or NAS box when you can buy a proper box that will give you the proformace you are looking for. I would imagine you can get a HP box with a simlair spec, i would just change the HDD config to suit your needs. When the server got backed up it pulled over 1GB a min from the drives, the added bonus if you can run windows search on the student data during the day with no problems Hope this helps Mark

I would also reccommend Procurve Switches I had a ZL for a core and then other procures for the client switches, never had any problems with them. They also come with a great warranty i have one port go down on one of my 48 port switches and it was replaced next day after a 10 min convosation with HP. Things i run on the network: I had over 1500 client devices attached and 30 servers all using procuve. I could still RIS 90 PC's during the day time without affecting any clients. I also run 150 thin clients these never got disconnected. They are by far the best value for money, they are perfect unless you can buy cisco equiptment

You can configure exchange to only allow relay access for set ip addresses, e.g. internal ip's like backup servers and eportal servers. Some software does not authenticate to mail servers so the only way you can get mail sent by them is to allow relay access from that servers IP

Hi, From what i have read you are trying to use Eportal to send emails to parents using the email feature built in. I am assuming that you cannot send any emails through your exchange server but it works when you use your local grid server. You should be able to use your inhouse exchange server to relay the messages from eportal to the parents. You might want to check you exchange config to allow relay access from your eportal server. You can test the relay access by loging onto your eportal server open command prompt and type: telnet myexchangeserver 25 helo Mail from: [email protected] Rcpt to: [email protected] After you connect to the telnet session you should see your email headers. If this fails to send fro the telnet session let me know what version of exchange you are running and i can send you the help to allow relay access. I have loads of customers using our exchange in this way. Hope this helps Mark

Hrm it is strange that it is looking at your old server for the GPO's and not getting them, you could move all the roles back to the old server to see if the new server is causing the problems. Once you have moved them back your clients should get GPOS after a gpupdate /force. This would rule out your new DC. if you need the process to move all five roles let me know. Mark

which DC is WestWaysPDC? the new or old one? also check AD sites and services, expand your site and you should see both your servers, check that both have replication partners in the NTDS Settings if not create the partners and check the replication topology.

Your steps are right, i always used a tool like robocopy to copy all the files over with permissions so ensure i didnt have to change any once the copy was done. It takes a little longer but save loads of time if you have home directories using the CREATOR OWNER permission. All should work fine since the server name is not changing

I found this to be a nightmare problem, I worked around the problem by installing as many apps as i could onto a app server and then searched the folder once a year for folders that had not been modified in the last year then removed the apps. I aslo used to get the HOD to fillin forms with the programs they wanted on the network, then if the app was not on the list it got backed up and removed until someone complained. The first year i removed about 70 small apps and found that only 4 needed to be reinstalled which was no big problem. Hope this helps

Yeh it sucks doing the searches, but i used to just search for big files over 200kb anything smaller it would not print out very well or would be very pixelated, therefore i just ignored the small pics. Also i found that once you found one big pic they would be a folder full of other pics. It is a long process and sucks, i spent most of my time making sure the pics could never get their in the first place, printing the pics out and sending them home used to do it for my school. For some reason sending indecent images home to parents scares the living hell out of pupils... wounder why

I have done loads of new server intergrations, this problem sometimes occures when i do single domain upgrades. The problem is probaly with your new DC not replicating GPO's here are some test steps that might help, To test Group policy on the new DC open Group policy management console, right click your domain and choose your new DC, see if you can navigate and change your GPO's when using your new DC. can you navigate to: \\newdc\NETLOGON\ \\newdc\SYSVOL\ These are the domain controllers replication folders. If they do not exist your clients will not get GPO's Did you move all 5 roles from the old DC to the new DC using ntdsutil? If you have removed your old DC and not moved all the roles your old DC will be holding some information your domain needs. When you promoted the new DC did you leave both DC's running side by side? LDAP and GP needs time to repliacte somtimes it can take 2 days (on realy slow networks) You might spot the problem when checking the above, if not can answer the questions i will be able to help you diagnose the problem further. Hope this helps

Live@Edu does not support the mapi connectivity, it is designed to be used by colleges and universities. You can see the functionality here: Free email accounts and worldwide access | Live@edu | Microsoft Corporation