In multi-Domain Forests you may encounter a situation where the Exchange Management Shell is not displaying the results you are expecting for some Get- queries. The reason for this is what is known as the Recipient Scope.
[PS] C:Admin>Get-Mailbox Name Alias ServerName ProhibitSendQuota ---- ----- ---------- --------------- Administrator Administrator exchserv unlimited
The Recipient Scope is the portion of Active Directory that the Exchange Management Shell or Console will use when managing recipients. For example, you may set the scope to a single Domain, OU, or to the entire Forest.
You can view the current Recipient Scope in the Exchange Management Shell.
[PS] C:Admin>$AdminSessionADSettings
ViewEntireForest : False
DefaultScope : resource.contoso.com
PreferredGlobalCatalog :
ConfigurationDomainController : dc1.resource.contoso.com
PreferredDomainControllers : {}
You can also modify the scope. For example, to modify the scope to the entire Forest you would issue this shell command.
[PS] C:Admin>$AdminSessionADSettings.ViewEntireForest = $true
[PS] C:Admin>$AdminSessionADSettings
ViewEntireForest : True
DefaultScope :
PreferredGlobalCatalog :
ConfigurationDomainController : dc1.resource.contoso.com
PreferredDomainControllers : {}
Notice now that the entire Forest is enabled and the scope is not limited to a single domain. Get- cmdlets for recipient management will now return all recipients in the multi-Domain Forest.
In 2010 Exchange server 2010 Set-ADServerSettings applies only to the current session, is there a way to set in every session By Default
Can I enable the ViewEntireForest for the EAC? (Exchange 2016). Certain functions (like export to PST) do not work for mailboxes in other domains within my forest. They work in the shell if I include the -domaincontroller parameter
The Real Person!
The Real Person!
Not AFAIK and I don’t have a multi-domain environment to look into it. I have a feeling the answer is just going to be to use PowerShell.
In case you’re still wondering – no, you cannot modify the ‘read’ scope but (in Exchange 2010 and later) you can modify write scope via RBAC
Is it possible to disable “modify recipient scope” based on permission?
Paul – when I run the $AdminSessionADSettings in the EMS I don’t get the nice output you show here… displays no results. Any idea what I’m doing wrong? Thanks!
The Real Person!
The Real Person!
Hi Marty, if you’re running Exchange 2010 the commands are Get-ADServerSettings to view the current settings, and Set-ADServerSettings to modify them.