IDM AD Driver & Managing Exchange Attributes

  • 3085865
  • 21-Feb-2007
  • 29-Apr-2013

Environment

Novell Identity Manager Driver- Active Directory Driver

Situation

There is a wizard in MMC called the Exchange Task Wizard. One of the options is Remove Exchange Attributes. Do you know if we can support this type of function within the AD driver? Customer use this tool to disable users, but currently it is a manual process. They want to do this automatically.

Resolution

The AD driver uses an API named CDOEXM to add, move, and delete Exchange mailboxes. For any other type of operation we use the LDAP interface of the AD driver. I suspect you can manage many Exchange related attributes by using a policy. Perform an LDIF export of a user before and after this Exchange tool was run. Once you have the diff of the attributes removed. You can then try to do the same thing via policy. Here is an example of just one of the attributes I know can be managed via the AD driver...

true