forked from timmcmic/DLConversionV2
-
Notifications
You must be signed in to change notification settings - Fork 0
/
new-RoutingContact.ps1
126 lines (94 loc) · 5.96 KB
/
new-RoutingContact.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
<#
.SYNOPSIS
This function creates the routing contact that will be utilized later if hybrid mail flow is enabled <and> to track attribute membership.
.DESCRIPTION
This function creates the routing contact that will be utilized later if hybrid mail flow is enabled <and> to track attribute membership.
.PARAMETER originalDLConfiguration
This is the original DL configuration from on premises.
.PARAMETER office365DLConfiguration
The configuration of the DL from Office 365.
.PARAMETER GlobalCatalog
The global catalog server the operation should be performed on.
.PARAMETER adCredential
The active directory credential.
.OUTPUTS
No return.
.EXAMPLE
Get-ADObjectConfiguration -powershellsessionname NAME -groupSMTPAddress Address
#>
Function new-routingContact
{
[cmdletbinding()]
Param
(
[Parameter(Mandatory = $true)]
$originalDLConfiguration,
[Parameter(Mandatory = $true)]
$office365DLConfiguration,
[Parameter(Mandatory = $true)]
$globalCatalogServer,
[Parameter(Mandatory = $true)]
$adCredential
)
#Start function processing.
Out-LogFile -string "********************************************************************************"
Out-LogFile -string "BEGIN new-RoutingContact"
Out-LogFile -string "********************************************************************************"
#write out parameters utilized to log file.
out-logfile -string ("Original DL Configuration = "+$originalDLConfiguration)
out-logfile -string ("Office 365 DL Configuration = "+$office365DLConfiguration)
out-logfile -string ("Global catalog server = "+$globalCatalogServer)
out-logfile -string ("AD User Name = "+$adCredential.UserName)
#Declare function variables and output to screen.
[string]$functionCustomAttribute1="MigratedByScript"
out-logfile -string ("Function Custom Attribute 1 = "+$functionCustomAttribute1)
[string]$functionCustomAttribute2=$originalDLConfiguration.mail
out-logfile -string ("Function Custom Attribute 2 = "+$functionCustomAttribute2)
[string]$functionOU=$originalDLConfiguration.distinguishedname.substring($originaldlconfiguration.distinguishedname.indexof("OU"))
out-logfile -string ("Function OU = "+$functionOU)
foreach ($address in $office365DLConfiguration.emailAddresses)
{
out-logfile -string ("Testing address for remote routing address = "+$address)
if ($address.contains("mail.onmicrosoft.com"))
{
out-logfile -string ("The remote routing address was found = "+$address)
$functionTargetAddress=$address
$functionTargetAddress=$functionTargetAddress.toUpper()
}
}
out-logfile -string ("Function target address = "+$functionTargetAddress)
[string]$functionDisplayName = $originalDLConfiguration.DisplayName+"-MigratedByScript"
$functionDisplayName=$functionDisplayName.replace(' ','')
[string]$functionName=$functionDisplayName
[string]$functionFirstName = $originalDLConfiguration.DisplayName
$functionFirstName=$functionFirstName.replace(' ','')
[string]$functionLastName = "MigratedByScript"
[boolean]$functionHideFromAddressList=$true
[string]$functionRecipientDisplayType="6"
[array]$functionProxyAddressArray=$originalDLConfiguration.mail.split("@")
[string]$functionMail=$functionProxyAddressArray[0]+"-MigratedByScript@"+$functionProxyAddressArray[1]
[string]$functionProxyAddress="SMTP:"+$functionMail
[string]$functionMailNickname=$functionProxyAddressArray[0]+"-MigratedByScript"
[string]$functionDescription="This is the mail contact created post migration to allow non-migrated DLs to retain memberships and permissions settings. DO NOT DELETE"
[string]$functionSelfAccountSid = "S-1-5-10"
out-logfile -string ("Function display name = "+$functionDisplayName)
out-logfile -string ("Function Name = "+$functionName)
out-logfile -string ("Function First Name = "+$functionFirstName)
out-logfile -string ("Function Last Name = "+$functionLastName)
out-logfile -string ("Function hide from address list = "+$functionHideFromAddressList)
out-logfile -string ("Function recipient display type = "+$functionRecipientDisplayType)
out-logfile -string ("Function proxy address = "+$functionProxyAddress)
out-logfile -string ("Function mail nickname = "+$functionMailNickname)
out-logfile -string ("Function description = "+$functionDescription)
out-logfile -string ("Function mail address = "+$functionMail)
#Provision the routing contact.
#When the contact is provisioned we add the master account sid of self. This tricks exchange commands into allowing us to assign permissions that are reserved for security principals.
try {
new-adobject -server $globalCatalogServer -type "Contact" -name $functionName -displayName $functionDisplayName -description $functionDescription -path $functionOU -otherAttributes @{givenname=$functionFirstName;sn=$functionLastName;mail=$functionMail;extensionAttribute1=$functionCustomAttribute1;extensionAttribute2=$functionCustomAttribute2;targetAddress=$functionTargetAddress;msExchHideFromAddressLists=$functionHideFromAddressList;msExchRecipientDisplayType=$functionRecipientDisplayType;proxyAddresses=$functionProxyAddress;mailNickName=$functionMailNickname;msExchMasterAccountSid=$functionSelfAccountSid} -credential $adCredential -errorAction STOP
}
catch {
out-Logfile -string $_ -isError:$TRUE
}
Out-LogFile -string "END new-RoutingContact"
Out-LogFile -string "********************************************************************************"
}