Active Directory

DirSync’s PowerShell functionality can now be invoked through the Import-Module cmdlet rather than running a custom DirSyncConfigShell.psc1 file. The module contains approximately 92 DirSync-related cmdlets. Module Structure The DirSync module itself functions as a wrapper containing no cmdlets. Instead, it calls %programfiles%\Windows Azure Active Directory Sync\dirsync\DirSync.psd1. The actual cmdlets are housed in the Microsoft.Online.Coexistence.PS.Config module and PowerShellConfig. Documented Cmdlets (25 total) Notable documented cmdlets include: ...

Today, Microsoft released a 9 page guide on backing up and restoring the Microsoft Azure Active Directory Sync tool. You can get it here. Some things to keep in mind: This guide applies to DirSync when used with the full version of SQL only. This means it does not apply to most installations. You don’t need to backup or restore DirSync. If you simply install a new instance and configure it appropriately, the objects will re-sync. Doing a backup/restore can save time however, if you have a very large number of users (I wouldn’t bother with less than 100k). Ironically, this guide doesn’t actually tell you how to backup or restore the database. You need some SQL-aware backup product to do that. Instead, this guide helps you make use of a restored database in a DirSync environment (working with miisclient.exe, handling keys, etc).

Late Monday, Microsoft released another update to the DirSync software, this time with a build number of 6593.0012. You can download it in from the usual link. As with previous DirSync updates, there has been no official announcement of the release, however the “use at your own risk” Wiki does mention one of the new features: Version 6593.0012 Date Released 2/3/2014 Notable Changes New features: Additional Attributes are synchronized on User and Contact objects The new attributes referenced in the link are userCertificate and userSMIMECertificate. Interestingly pwdLastSet was also added, however there is no mention of that one in the article. These additions serve an unknown purpose for now, however one might speculate that they are in support of new capabilities soon to be available in the service?! ...

Microsoft released DirSync version 1.0.6567.0018 after quietly withdrawing a previous version last week. The prior iteration had encountered synchronization complications during the export phase, documented in KB 2906832. New Feature DirSync can now be installed on a Domain Controller. Important: You must log off and log on AFTER installation and BEFORE running the configuration wizard. Bug Fixes and Improvements This release addresses multiple technical issues: ...

EDIT (Nov. 22, 2013): DirSync 1.0.6567.0018 Has Been Released EDIT (Nov. 11, 2013): DirSync 1.0.6553.2 has been removed from Microsoft’s download site and version history comment removed from the Wiki. Not sure why. Early this morning, Microsoft released an updated version of Windows Azure Active Directory Sync tool (DirSync to you and me). Version 1.0.6553.2 (or later) can be downloaded from the usual link. It comes with 4 known improvements: Fix to address Sync Engine memory leak Fix to address “staging-error” during full import from Azure Active Directory Fix to handle Read-Only Domain Controllers in Password Sync DirSync can be installed on a Domain Controller I am most excited about #4, as this enables me to build more interesting labs from my laptop, now that I don’t need a dedicated “DirSync Server”. You should note however, this is recommended only for “development” environments. After some further testing, I’d consider recommending this configuration for shops with multiple domain controllers and 50 or fewer users. ...

Update: Be aware, this script has not been tested with SIP, X400 or other address types. I recently encountered a question in an online forum where someone asked for a script to convert all of their user’s email addresses to lower case values. While this doesn’t affect the message delivery, it can have an impact on aesthetics when the address is displayed in an external recipient’s email client. An Exchange Email Address Policy can do this to some degree, but I wanted to see how it could be done with PowerShell. ...

A common challenge in PowerShell: mailbox sizes are returned with the Get-MailboxStatistics cmdlet but the email address is not. For that, you need another cmdlet, such as Get-Mailbox. So how do you combine results from multiple cmdlets into a single output? The Solution: Custom Objects with PSObject The approach involves: Creating a custom object with defined properties set to null Populating fields by querying different cmdlets Using foreach loops to process multiple users Outputting results as a unified list Example: Mailbox Report Here’s how to build a mailbox report combining email addresses and storage sizes: ...

Detailed installation walkthrough of the new 64-bit Office 365 DirSync, including prerequisites, configuration wizard, and FIM exploration.

Microsoft announces the availability of a 64-bit DirSync for Office 365, based on Forefront Identity Manager 2010.

Until now, there were no Remote Server Administration Tools (RSAT) available for Windows 7 SP1. Microsoft released an updated version today which adds this support. You can download it here: Remote Server Administration Tools for Windows 7 with Service Pack 1 (SP1)