dennylutz

Hey Guys, Here is tool that does similar job but also supports Exchange, Lync and Salesforce. Bulk user creation isnt included though. Seems like a perfect tool on onboarding and offboarding employees. Z-Hire Active Directory User Creation Tool Z-Hire automates the IT user account creation process for Exchange mailbox, and Active Directory and Lync accounts. With just a click of the button, your Exchange mailbox, and Active directory user, Lync account and SalesForce User account will be created simultaneousy. Z-Hire serves as the platform for new hire accounts by allowing auto-creation of major IT accounts with the option for custom scripts. Z-hire will decrease your account deployment time by 600%, without the need for complicated and expensive identity management solutions. This tool makes creating Active Directory users a breeze. Some of the features include: - Environment Auto discovery (AD/Exchange/Lync/SalesForce) - Support for Active Directory user, Exchange, Lync 2010 and SalesForce user accounts - Template based deployment (allows consistency for all user accounts) - Active Directory user creation with major attributes - Active Directory group selection - Active Directory user duplicate SamAccountName detection - Lync 2010 user account creation supporting all policies - SalesForce user account creation supporting all attributes - Faster performance (compared to previous version) - Best of all, this AD User Creation Tool is free! Supported Environments / IT systems - Active Directory (all versions) - Exchange 2007 (all versions) - Exchange 2010 (all versions) - Lync 2010 (both Standard and Enterprise versions) - Office 365 Cloud - SalesForce Cloud http://www.zohno.com/images/zhirev4screenshots/AD_2.png http://www.zohno.com/images/zhirev4screenshots/AD_3.png

you need to use the Get-mailboxPermission command to see who had the permission... Get-Mailbox username | Get-MailboxPermission

I used to be a be fan on Symantec but we are running Microsoft Forefront now.. it works great !!! 3000 users.

Silverhand, Can you elaborate more on what you are trying to do ? You said you want to "apply different settings for teachers and students" , are you refering to computer settings or user settings ? As Stuart said, GPO loopback processing can be trickly and very hard to troubleshoot when things go sideways so we dont usually recommand it. Have you looked into Group Policy Filtering ? Group Policy filtering allows you to apply GPO based on AD group instead of AD OUs. You can simply apply the GPO a secuirty group where all your teachers belong to.