Christos Polydorou

I:ve recently published another of my Poweshell modules to the Powershell Gallery. This time it's the CPolydorou.ActiveDirectory module. This module contains functions that can help with Active Directory tasks. Let's go through the functions and see where they can help. Test-ActiveDirectoryGroupMembership This function will test if an object is member of a group. It also includes a recursive switch. Test-ActiveDirectoryIsDomainAdmin Test if a user is member of the domain admins group. Get-ActiveDirectoryUserGroupMembershipHistory Check when a user was added to a group by examining the Active Directory replication metadata. More functions are going to be added to this module in the near future so make sure you have the latest version installed!

Today I would like to talk a bit about the Active Directory attributes related with mail flow on Exchange server. There are five settings on an exchange recipient that control mail flow (represented by the name of the Powershell parameter of the relative cmdlets): AcceptMessagesOnlyFrom AcceptMessagesOnlyFromDLMembers RejectMessagesFrom RejectMessagesFromDLMembers RequireAllSendersAreAuthenticated Let's examine them one by one! AcceptMessagesOnlyFrom When this is set, the recipient will only be able to receive messages from the specified recipients. Corresponding AD attribute: "authOrig". AcceptMessagesOnlyFromDLMembers Same as above but for the members of the specified DLs. The relative AD attribute is "dLMemSubmitPerms". RejectMessagesFrom When this is set, messages from the specified recipients will be rejected. The AD attribute behind this setting is "unauthOrig". RejectMessagesFromDLMembers Same as above but for the members o...