Where is the msExchMasterAccountSID attribute

Hi there,
according to an MS technet article, when using a Resource
Forest for Exchange, you create a disabled user account with a mailbox and
then associate the mailbox with an active user account in another forest.
You do this by setting the msExchMasterAccountSID attribute to the SID of
the active user. Where is that attribute, I cant see it in AD. Also, how
do I retreive the relevant users SID in order to set this attribute?

OK the SID is very simple to retrive via scripting, as shown below. I just
need to know where the msExchMasterAccountSID attribute is that I need to
set.

strComputer = "."
strUser = "administrator"
strDomain = "test"

Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")

Set objAccount = objWMIService.Get _
("Win32_UserAccount.Name='" & strUser & "',Domain='" & strDomain & "'")

Wscript.Echo objAccount.SID

Have you already extended the schema for Exchange in your AD forest &
domain?


Waldy wrote:
> OK the SID is very simple to retrive via scripting, as shown below. I just
> need to know where the msExchMasterAccountSID attribute is
> that I need to set.
>
> strComputer = "."
> strUser = "administrator"
> strDomain = "test"
>
> Set objWMIService = GetObject("winmgmts:\\" & strComputer &
> "\root\cimv2")
> Set objAccount = objWMIService.Get _
> ("Win32_UserAccount.Name='" & strUser & "',Domain='" & strDomain &
> "'")
> Wscript.Echo objAccount.SID

--
/kj

Hi there,
I'm looking on a test system where Exchange is already
installed, so I would imagine that has already been done.

"kj [SBS MVP]" <KevinJ.SBS@SPAMFREE.gmail.com> wrote in message
news:Ox4LbbwMKHA.220@TK2MSFTNGP02.phx.gbl...
> Have you already extended the schema for Exchange in your AD forest &
> domain?
>
>
> Waldy wrote:
>> OK the SID is very simple to retrive via scripting, as shown below. I
>> just need to know where the msExchMasterAccountSID attribute is
>> that I need to set.
>>
>> strComputer = "."
>> strUser = "administrator"
>> strDomain = "test"
>>
>> Set objWMIService = GetObject("winmgmts:\\" & strComputer &
>> "\root\cimv2")
>> Set objAccount = objWMIService.Get _
>> ("Win32_UserAccount.Name='" & strUser & "',Domain='" & strDomain &
>> "'")
>> Wscript.Echo objAccount.SID
>
> --
> /kj
>

that's done by assigning "Associated External Account" permissions to the
ACTIVE user on the DISABLED user

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------

"Waldy" <someonenot@microsoft.com> wrote in message
news:#2e#t#sMKHA.504@TK2MSFTNGP06.phx.gbl...
> Hi there,
> according to an MS technet article, when using a Resource
> Forest for Exchange, you create a disabled user account with a mailbox and
> then associate the mailbox with an active user account in another forest.
> You do this by setting the msExchMasterAccountSID attribute to the SID of
> the active user. Where is that attribute, I cant see it in AD. Also, how
> do I retreive the relevant users SID in order to set this attribute?
>
>
> __________ Information from ESET Smart Security, version of virus
> signature database 4507 (20091014) __________
>
> The message was checked by ESET Smart Security.
>
> http://www.eset.com
>
>
>

__________ Information from ESET Smart Security, version of virus signature database 4507 (20091014) __________

The message was checked by ESET Smart Security.

http://www.eset.com