To date, there is no
automatic unlocking interval and manual administrator intervention is required. The two ways to
unlock the UM portion of the account are to use the GUI or the Set-UMMailboxPIN cmdlet. Using the
cmdlet offers a greater degree of usability because it can be collaborated into a suite of cmdlets that could
Chapter 10: Unifi ed Messaging
287
have a console application or a web - based front end created for them and allows service - desk personnel
to perform user management functions. The other bonus to using cmdlets is that they can be used in
addition to other personal information to create an employee self - service portal. To unlock the account
the Set-UMMailboxPIN must have the Identity parameter. This parameter takes any of the
following:
??‘ ADObjectID: The syntax of the AD object is domain\OU\name . So for example, you might have
this: exchangeexchange.com\sales\john doe
??‘ GUID Ex: (43cbd6ff - ac3b - 4a8f - 8906 - f14eb33a0b31) ??” A GUID is a globally unique identifier.
Think of it as a serial number or a MAC address. Two GUIDs cannot be the same in an Active
Directory forest.
??‘ DN: The distinguished name can be the full name. The distinguished name is the LDAP listing
of the user. It contains the user ??™ s full name, the organizational unit (OU) that he resides in, as
well as the domain name.
Pages:
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415