Remote Mailbox provisioning in ISC

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi Everyone,

We have a requirement to create a remote mailbox via powershell script. Below is our understanding. Can anyone help us if we are going in the right direction?

  1. Create user in AD.
  2. Use After create rule to trigger powershell script to create the new remote mailbox.
    New-RemoteMailbox -Name $sAMAccountName -Alias $sAMAccountName
    -DisplayName $displayName -FirstName $firstName
    -LastName $lastName -UserPrincipalName $userPrincipalName
    -Password $securePassword -RemoteRoutingAddress "$($sAMAccountName)@$tenant.mail.onmicrosoft.com"
    -OrganizationalUnit $onPremisesOrganizationalUnit `
    -ErrorAction Stop
  3. Azure AD connect sync with AD user object with remote mailbox attribute and assign license via SailPoint
  4. Exchange Online detects the licensed user with the correct remote mailbox attributes and provisions the Exchange Online mailbox.
2

First, create the AD user and use an After Create rule in SailPoint to trigger a PowerShell script. The New-RemoteMailbox command should be used to stamp the required Exchange attributes. Azure AD Connect will sync the user and mailbox attributes to Azure AD, and SailPoint can assign the necessary license. Once licensed and synced, Exchange Online will detect the attributes and provision the mailbox automatically.

3

Hi @PRIYANKALINGALA

You’re almost there but you should use enable-remotemailbox as the AD user already exists, and you don’t need all those parameters. See Exchange Mailbox Provisioning - #5 by j_place for a more detailed breakdown.

Obviously, this is only required if you are using Exchange in Hybrid mode.