Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Wednesday, March 15, 2017 11:30 AM
Running Exchange 2016 CU3 in an Windows Server 2008 R2 domain functional AD.
When creating a new security group via Exchange Admin Center, the group is created fine but when I look at in Active Directory Users and Computers the group name (pre windows-2000) has a - and a ten digit number added after the name I set.
Does anyone know why and how I can stop this?
I can go in afterwards and remove the number but it just adds another step.
Thasnk for your help,
Mrtro
All replies (2)
Wednesday, March 15, 2017 11:53 AM âś…Answered
Hi
Pre windows 2000 is the samaccountname of an object
This can be changed latter and will be an extra step
You can also create Security groups via Powershell and in that way it would be one time activity
New-distributiongroup -name "Classic" -Type "Security" -Samaccountname "Classic" -members [email protected],[email protected] -Primarysmtpaddress [email protected]
MCSA Office 365 | MCSA Exchange server 2010 | Red Hat Certified Engineer
Thursday, March 16, 2017 7:49 AM
Hi,
Based on my knowledge, it was added by default. For now, I didn't find some solutions to stop this behavior. But I have some workarounds.
- Create Security Group via EMS as suggested above.
- Use Cmdlet Extension Agent with the following steps:
- On all Exchange Server 2016, find the %ExchangeInstallPath%Bin\CmdletExtensionAgents\ScriptingAgentConfig.xml.sample file, rename it to ScriptingAgentConfig.xml (Backup the original file)
- Open renamed file, remove all the content and add the following script.
- Enables the cmdlet extension agent named Scripting Agent: Enable-CmdletExtensionAgent "Scripting Agent"
- Restart IE and try to create a new security group via EAC.
Script:
<?xml version="1.0" encoding="utf-8" ?>
<Configuration version="1.0">
<Feature Name="MailboxProvisioning" Cmdlets="New-DistributionGroup">
<ApiCall Name="OnComplete">
If($succeeded) {
$mbx = $provisioningHandler.UserSpecifiedParameters["Alias"]
Set-DistributionGroup $mbx -SamAccountName $mbx
}
</ApiCall>
</Feature>
</Configuration>
Best Regards,
Lynn-Li
TechNet Community Support
Please remember to mark the replies as answers.
If you have feedback for TechNet Subscriber Support, contact [email protected].