C.1 Provisioning Exchange 2003 Account

There are two different ways to provision the Exchange 2003 mailbox account with the Active Directory driver. You can set attributes on User objects so a Microsoft program (the Recipient Update Service) can use this information to provision to users to the Exchange database. Or you enable Collaboration Data Objects for Exchange Management (CDOEXM), which is the method documented in this section.

CDOEXM is an API that is provided by Microsoft. The Active Directory driver uses this API to provision the Exchange accounts.

With CDOEXM enabled, an Exchange 2003 mailbox is provisioned by setting the homeMDB attribute. When the homeMDB attribute is set, the driver automatically sets all required attributes. The driver can create, delete, and move mailboxes. The mailbox moves that are supported are only interdomain moves.

The homeMDB attribute is set during initial configuration, but you can change the setting by modifying the driver policy. To find out what the homeMDB attribute is for your Exchange system, see Section 4.1, Gathering Configuration Information.

To configure the driver to synchronize Exchange 2003 account:

  1. If the server that is running the driver is a non-Exchange server, make sure the Exchange Management tool is installed on this server.

  2. Verify that the authentication account for the driver has enough rights to create, delete, or move Exchange accounts.

  3. If the driver is running on a member server, you must use SSL and you must run the Remote Loader service as a specific domain user with enough rights to delete, create, or move Exchange accounts.

  4. Run the Active Directory Discovery tool to find out what the homeMDB attribute is for the Exchange 2003 system. For more information, see Section 4.1, Gathering Configuration Information.

  5. Specify the configuration parameters to provision the Exchange mailboxes, when you are creating a driver object. See Table C-1 for a list of Exchange parameters. See Section 4.0, Creating a New Driver for information on how to create the driver object.

  6. Verify that you have selected use-cdoexm to provision the Exchange 2003 mailboxes. See Exchange Management interface type for more information.

Table C-1 Exchange Provisioning Configuration Parameters



Exchange Policy

Exchange provisioning can be handled by a driver policy, Entitlements, or skipped entirely. A user can be assigned a mailbox in Exchange (the user is mailbox enabled) or have information about a foreign mailbox stored in the Identity Vault record (the user is mail enabled).

When using Entitlements, an external service such as the Workflow service or Role-Based Entitlements makes these decisions and the driver policy simply applies them.

Implement in policy uses the policies in the driver instead of Entitlements to assign Exchange mailboxes. When using the driver policy, the decision to mailbox-enable or mail-enable a user, plus the Exchange message database where the account will reside, is controlled completely in the policy.

When None is selected, the default configuration does not create Exchange mailboxes but does synchronize the Identity Vault Internet E-Mail Address with the Active Directory mail attribute.

Exchange Management interface type

The driver cannot provision both Exchange 2007 mailboxes and Exchange 2003 mailboxes. This option allows you to select which type of mailboxes the driver can provision.

use-cdoexm synchronizes Exchange 2003 accounts.

use-post-cdoexm synchronizes Exchange 2007 accounts.

Allow Exchange mailbox move (yes/no)

When this option is enabled, the driver shim intercepts modifications to the Active Directory homeMDB attribute to move the mailbox to the new message data store.

Yes moves the Exchange mailbox.

No does not move the Exchange mailbox.

Allow Exchange mailbox delete (yes/no)

When this option is enabled, the driver shim intercepts removal for the Active Directory homeMDB attribute to delete the mailbox.

Yes allows the Exchange mailbox to be deleted.

No does not allow the Exchange mailbox to be deleted.

Default Exchange MDB

Specify the default Exchange Message Database (MDB). To obtain the correct name for the Exchange MDB, see Section 4.1, Gathering Configuration Information.

For example,

[CN=Mailbox Store (CONTROLLER),CN=First Storage Group,CN=InformationStore,CN=CONTROLLER,CN=Servers,CN=First Administrative Group,CN=Administrative Groups,CN=Domain,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=Domain,DC=com]

The driver can be updated to manage additional MDBs after the import is complete.