ADHELP FAQ (10/20/05)
Q: What is the maximum attachment size for Exchange users?
Q: What is the production URL for Outlook Web Access?
Q: We have two temp employees and was wondering how to control their accounts with the migration.
Q: What is the maximum attachment size for Exchange users?
A: The maximum message size was agreed upon by the steering committee to be 150MB.
Q: When I try to turn on the junk filter, a message pops up saying it will not work until in cache email mode.
A: Per Microsoft http://office.microsoft.com/en-us/assistance/HA011402621033.aspx
Support in different versions of Exchange Server
Junk E-mail Filter behavior varies depending on the Exchange Server version you use for messaging. Later versions of Exchange Server support more filtering options than earlier versions do.
The following list details Junk E-mail Filter behavior with different versions of Exchange Server.
· Versions earlier than Exchange Server 2003
If users use Cached Exchange Mode or download to a Personal Folders file (PST file): Users can create and use the Junk E-mail Filter lists, which are available from any computer that users use.
If users work online: The Junk E-mail Filter is not available.
· Exchange Server 2003
If users use Cached Exchange Mode or download to a Personal Folders file (PST file): The Junk E-mail Filter lists that are available from any computer are also used by the server to evaluate mail. This means that if a sender is on a user's Blocked Senders list, mail is moved to the Junk E-mail folder on the server and is not evaluated by Outlook 2003. In addition, Outlook 2003 uses the Microsoft Research technology to evaluate e-mail messages.
If users work online: The Junk E-mail Filter lists that are available from any computer are also used by the server to evaluate mail. This means that if a sender is on a user's Blocked Senders list, mail is moved to the Junk E-mail folder on the server and is not evaluated by Outlook 2003.
Q: Is there a way to have all the SpamAssassined messages go to the Junk E-mail folder? Some are while others are not.
A: This article (http://xbase.ucdavis.edu/itexpress/article.cfm?art=813) describes how to configure a rule in Outlook to filter messages with the X-Spam-Score header to your Junk mailbox.
Q: The native Outlook client fails to configure, reporting that the "name could not be matched to a name on the address list."
A: Your account in T3/AD3 could be "hidden from the Global Address List". You can try un-hiding the account (use you admin_XXXX account), or let us know and one of the AD Admin can un-check the box
Q: What is the production URL for Outlook Web Access?
A: http:\\owa.ucdavis.edu
Q: How do we go about changing the reply to address to the email_user@ucdavis.edu address instead of the kerberos_username@ad3.ucdavis.edu address?
A: The reply to address is taken from the user's primary SMTP address. You can set the primary SMTP address on the user's account by going into Active Directory Users and Computers, open up the properties of the user, click the E-mail Addresses tab, and add a new SMTP address. Then set the address as the Primary. The permissions to do this will be available soon. For the time being, send an email to adhelp@ucdavis.edu to request this.
Q: The PPS harvester seems to work fine to get all the employees with your department as their home department (six digit code). However I've noticed it picks up numerous former employees as well. I asked our local Payroll guru and he says that those who control PPS want us to leave the home department as-is even after employee separation. Consequently, I've got students in my user lists that haven’t worked here for years.
If we're going to use this system to assign resource security permissions, is this a potential problem? Seems like we won't be able to trust our own user group and we'll be forced to populate our own "All Users" group to ensure security. Is this the intention?
What's the official line on this issue?
A: Here's the explanation for what's going on for your department code:
The harvester program is finding 63 people who are have your department code in mothra and are active. They fall into three types: staff (41), staff/student (13) and student (9). These types are assigned by mothra based on the status of a person in PPS and in SIS. The 13 people with staff/student type are in SIS as active students and in PPS as active employees with your department code. The nine people who are now students must be former Fleet employees. They have your department code as their last PPS home department, but they are no longer in the extract mothra receives from PPS daily. When mothra changed the type from staff/student to student, it did not remove the department code.
I'll propose a change be made to mothra code to remove department codes from people that change from staff/student to student as their type. We can also fix the current nine students by removing their deptcode and IMAD and ADSP permits in mothra. This action will disable their AD account in T3 and AD3.
Just send the list to adhelp. This will not change their record in PPS. If the issue is with people who have staff/student type, then the PPS record would need to be altered by your admin staff.
We need to do this on a department by department basis - there are 281 departments in mothra that have at least one student listed with their department code (ASUCD has over 700).
You and others will also want to manually add your department codes to people's mothra records. That way, temporary affiliates or students can be given IMAD and ADSP permits at your request.. And these accounts will automatically be added to your OU. When their temporary affiliation expires in mothra and their permits go away, the account is disabled in AD.
Hope this explains what's going on.
Q: We have two temp employees and was wondering how to control their accounts with the migration.
A: Email the names to ADhelp@ucdavis.edu and they will be moved to your group so you can manage them.
Q: What is the compatibility with Mac Office's Entourage? I have been able to set up folder and email syncing by pointing Entourage to exch3.ex.ad3.ucdavis.edu however sending mail is not possible.
Second, is IMAP support available in OIC Exchange?
Third, what is the compatability with Treo devices specifically syncing to Exchnage and email support?
A: IMAP is enabled on all OIC back-end and front-end servers, as required for this service. The front-end servers proxy requests for IMAP and HTTP clients after validating authentication.
IMAP is enabled and tested in the test forest, accessible at towa.ucdavis.edu, and requires SSL.
IMAP is enabled and tested in the production forest, accessible at owa.ucdavis.edu, and requires SSL.
POP is disabled and was never intended as a supported access protocol.
I've also included a document with sample settings for IMAP access. Further discussion is needed regarding the IPOP permit and off-campus authenticated SMTP.
Q:We have someone who have just changed their lastname due to marriage. This change was made to PPS. Mothra pulls from PPS, will this change be updated in AD3 and the exchange display name? The email address will be the same.
A:There is a script that runs nightly to update information on the user object. This information's pulled from the campus LDAP. When the campus LDAP is updated, the account in AD3 will be updated as well.”
Q:As a departmental admin, the groups I really care about are the OU groups that I have created to manage departmental permissions, GP's, and so forth. For a given user, how do I see which of these OU-level groups they are a member of?
A:If you use the Action>find option in Active Directory Users and Groups MMC, then from the find dropdown select custom search, then choose the advance tab, on the “In:” drop down choose the entire directory and enter the following LDAP query (change the username of course)
(&(objectCategory=group)
(member=CN=phawley,OU=ucdUsers,DC=T3,DC=UCDAVIS,DC=E
DU))
You will receive a list of all groups that a user is a member of…