Yep. That's why I think it's a Unity bug. Sounds like they've flagged the wrong attribute.
********************** Charlie Kaiser W2K3 MCSA/MCSE/Security, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ********************** > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: Tuesday, August 16, 2005 3:12 PM > To: [email protected] > Subject: RE: [ActiveDir] User accounts with > showInAdvancedViewOnly=TRUE > > Charlie, the mod you are doing in ADUC Exchange Advanced > corresponds to the > "ShowInAddressBook" attrib, not the "showInAdvancedViewOnly" > attrib. I am not > familiar with Unity, but from what you guys have been saying, > it looks that > Unity is toggling the "showInAdvancedViewOnly" value, not (or maybe in > addition to) the "ShowInAddressBook" attrib. > > > Sincerely, > > Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I > Microsoft MVP - Directory Services > www.readymaids.com - we know IT > www.akomolafe.com > Do you now realize that Today is the Tomorrow you were worried about > Yesterday? -anon > > ________________________________ > > From: [EMAIL PROTECTED] on behalf of Charlie Kaiser > Sent: Tue 8/16/2005 2:44 PM > To: [email protected] > Subject: RE: [ActiveDir] User accounts with > showInAdvancedViewOnly=TRUE > > > > OK; I just looked at that and verified that if I set the "Show > subscriber in e-mail server address book " box in unity to be > unchecked, > it sets the flag to true in AD. If I check it, the flag gets set to > false. > Except that our admin didn't touch the Unity config. That's the weird > part. Perhaps it's a combination of disabling the account, > moving it to > another OU, etc. > Might be a unity bug; I'll look farther into that. Problem > is, if we set > the "hide from address list" box in ADUC exchange advanced, it doesn't > set the same flag in Unity. Seems like Unity and Exchange > aren't looking > at the same attribute. > If I get time, I'll call cisco on it tomorrow.... > > ********************** > Charlie Kaiser > W2K3 MCSA/MCSE/Security, CCNA > Systems Engineer > Essex Credit / Brickwalk > 510 595 5083 > ********************** > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Free, Bob > > Sent: Tuesday, August 16, 2005 2:19 PM > > To: [email protected] > > Subject: RE: [ActiveDir] User accounts with > > showInAdvancedViewOnly=TRUE > > > > Well, here's what we found- > > > > Totally unrelated to Unity, our Unity admin contacted me about not > > seeing an account in object picker to add to a group. I checked and > > showInAdvancedViewOnly=TRUE, I mentioned this discussion to > him, so he > > looked at it from Unity interface- > > > > The setting in Unity for that account was "Do not list subscriber in > > phone directory" and "Show subscriber in e-mail server > address book". > > He changed it to "Do not show in GAL". saved it. Then > enabled both so > > the settings are now "List in phone directory" and "Show > subscriber in > > e-mail server address book" > > > > I looked again and showInAdvancedViewOnly: was toggled to FALSE > > > > He's going to play around with it from the Unity side and see > > if he can > > repro the issue. > > > > hth > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Free, Bob > > Sent: Tuesday, August 16, 2005 1:56 PM > > To: [email protected] > > Subject: RE: [ActiveDir] User accounts with > > showInAdvancedViewOnly=TRUE > > > > This is a bit surreal, I *just* got asked about this exact > situation > > only a couple of minutes after Charlie's message. > > > > We are in a very similar environment although it's E2K > instead of 2K3, > > is Unity a common denominator? > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. > > Smith > > Sent: Tuesday, August 16, 2005 1:33 PM > > To: [email protected] > > Subject: RE: [ActiveDir] User accounts with > > showInAdvancedViewOnly=TRUE > > > > I can't explain it to you, but you aren't alone. I've seen > exactly the > > same thing happen (and I'm in the same environment you > > describe). But it > > never made it high enough up my priority list to investigate. > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of > > Charlie Kaiser > > Sent: Tuesday, August 16, 2005 4:19 PM > > To: [email protected] > > Subject: [ActiveDir] User accounts with showInAdvancedViewOnly=TRUE > > > > I've recently run into a weird problem and can't find anything that > > explains it to me. > > > > W2K3 AD single-domain forest, 2K3 native mode, E2K3 > enterprise, Cisco > > Unity VM schema extensions. > > > > Our junior admin recently handled a couple of user terminations. > > Disabled the account, set self to full mailbox access, moved account > > from Employees OU to terminated sub-OU. I had to do something > > to one of > > those accounts and didn't see it in ADUC. Knew it was there > somewhere, > > so fired up ADFind. Turns out the showInAdvancedViewOnly > attribute had > > been set to TRUE. > > > > Junior admin logs into exchange server to perform the account > > management, because it's the only machine that has the > exchange admin > > tools on it that he can access. (That's changing today; he > > WILL load the > > tools on his machine. <G>) He didn't do anything special, > doesn't use > > ADSIEdit or DSMOD; strictly the ADUC GUI. > > > > I'm trying to figure out why this would happen, and I don't > > have a clue. > > Any ideas? Easy enough to set the attribute back, but I'm > > wondering why > > it would set it in the first place. AFAIK, there isn't any > way to set > > that attribute via the ADUC GUI... > > This has only happened on two accounts, both dealt with in the past > > couple of weeks... > > > > Thanks! > > > > ********************** > > Charlie Kaiser > > W2K3 MCSA/MCSE/Security, CCNA > > Systems Engineer > > Essex Credit / Brickwalk > > 510 595 5083 > > ********************** > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: > > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: > > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: > > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: > > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
