Z-Hire V3 Administration Guide

Transcription

1 Z-Hire V3 Administration Guide The main purpose of Z-hire is to allow for fast account deployment. Usually when an administrator provisions a new user account, multiple consoles are used to get the job done. This app uses a template concept that allows for system administrators to save frequently-used settings for multiple IT systems. With just a click of the button, your Exchange mailbox, and Active directory and Lync accounts will be created simultaneously. Z-Hire serves as the platform for new hire accounts by allowing auto-creation of major IT accounts with the option for custom scripts. Requirements System Requirements Windows 7 X64 (Domain Joined) Windows Server 2008 X64 (Domain Joined) Windows Server 2008 R2 X64 (Domain Joined) Permission Requirements Ability to create Active Directory user (Active Directory Account Operator) Ability to create Exchange Mailbox (Exchange Recipient Administrator) Ability to create / enable Lync user (CSAdministrator) Supported Environments Active Directory (all versions) Exchange 2007 (all versions) Exchange 2010 (all versions) Lync 2010 (both Standard and Enterprise versions) PowerShell Remoting Zohno, Inc. 1

2 PowerShell remoting is usually enabled by default, but please make sure it is enabled on your Exchange and Lync servers you are connecting to. Ensure all Exchange/Lync Servers are enabled for PS remoting. This is done by running "Enable-Psremoting" powershell command on Exchange/Lync server you wish to connect to. Fill out "Environment Config" portion of the form. Use "File" > "Save Environment Config" to save configuration to select template. Use Options > Environment Auto Discover to automatically load environment configuration. Templates Templates feature allows an administrator to easily save a set of commonly-used user information. This speeds up the account deployment process. For example, you can set a template for each business department like Marketing and as a marketing template, you may select a list of marketing Active Directory group, marketing mailbox database, marketing users Active Sync Policy, etc. Load Template Settings Use the drop down box to simply load template settings. Zohno, Inc. 2

3 Save Template Settings Use File > Save Configuration to save template settings. Settings will be saved to current template. Rename Template Name To rename template names, use Options > Rename Templates. Environment Auto Discover Environment auto discover allows administrators to easily populate data to Zohno Z-hire. This process connects to a provided Exchange Server and Lync Server to retrieve settings. You can then select desired settings and load to user templates. Enter Exchange server and Lync server, and then click on Run Auto Discover. Zohno, Inc. 3

4 Once you have selected desired settings, you can load it to any template you like. Active Directory New Users AD OU This is a DN of an OU where new Active Directory users will be created. Example: ou=newusers,dc=mydomain,dc=net UPN Suffix This is your AD domain name in FQDN format. This will be used for Active Directory account upn suffix. Example: mydomain.net User Account Format This is the format of SamAccountName, example: jon.doe or jdoe Zohno, Inc. 4

5 Default Password This is the password that will be set for the new AD account. Must change password at next logon This is the same as ADUC console option for must change password at next logon. Office - This set the Office Active Directory attribute for the new AD account. Street - This set the Street Active Directory attribute for the new AD account. City - This set the City Active Directory attribute for the new AD account. State / Province - This set the State Active Directory attribute for the new AD account. Zip / Postal Code - This set the Zip code Active Directory attribute for the new AD account. Country / Region - This set the Country Active Directory attribute for the new AD account. Account Disabled Disables the new AD Account. Zohno, Inc. 5

6 Password never expires Set new AD account status to password never expires. Company This set the Company Active Directory attribute for the new AD account. Department - This set the Department Active Directory attribute for the new AD account. Manager - This is a SamAccountName or Displayname of the manager. Notes - This set the Notes Active Directory attribute for the new AD account. Exchange 2007 Exchange 2007 Management Shell Exchange 2007 Management Shell must be installed on a computer that is running Zohno Z-hire. Mailbox Database Exchange 2007 Mailbox Database, example: EX01\Storage Group1\DB1 Managed Folder Policy Exchange 2007 Managed Folder Policy ActiveSync Policy Exchange 2007 ActiveSync Policy Zohno, Inc. 6

7 Additional SMTP Address Full SMTP address of the additional SMTP address, example: CustomAttribute1 Set Exchange Mailbox CustomAttribute1 Hidden from GAL Hide Exchange Mailbox from Global Address List Grant full access permission Same as running Add-MailboxPermission fullaccess Grant send on behalf of Same as running Add-ADPermission Forward to SamAccountName of user where mail will be forwarded to Issue warning at Issue warning at quota for the mailbox. If this field is blank, it will use Database default quota Prohibit Send at Prohibit Send at quota for the mailbox. If this field is blank, it will use Database default quota Zohno, Inc. 7

8 Prohibit send and receive at Prohibit send and receive at quota for the mailbox. If this field is blank, it will use Database default quota Keep deleted items for Keep deleted items for quota for the mailbox. If this field is blank, it will use Database default quota Exchange 2010 Exchange 2010 Server FQDN of Exchange 2010 CAS or Mailbox Server. Mailbox Database Exchange 2010 Mailbox Database, example: MailboxDatabase01 Archive Database Exchange 2010 Archive Mailbox Database. If this field is set, archive mailbox will be created for user. Retention Policy Exchange 2010 Retention Policy. ActiveSync Policy Exchange 2010 ActiveSync Policy Managed Folder Policy Exchange 2010 Managed Folder Policy Zohno, Inc. 8

9 Additional SMTP Address Full SMTP address of the additional SMTP address, example: CustomAttribute1 Set Exchange Mailbox CustomAttribute1 Hidden from GAL Hide Exchange Mailbox from Global Address List Grant full access permission Same as running Add-MailboxPermission fullaccess Grant send on behalf of Same as running Add-ADPermission Forward to SamAccountName of user where mail will be forwarded to Issue warning at Issue warning at quota for the mailbox. If this field is blank, it will use Database default quota Prohibit Send at Prohibit Send at quota for the mailbox. If this field is blank, it will use Database default quota Zohno, Inc. 9

10 Prohibit send and receive at Prohibit send and receive at quota for the mailbox. If this field is blank, it will use Database default quota Keep deleted items for Keep deleted items for quota for the mailbox. If this field is blank, it will use Database default quota Lync 2010 Lync 2010 FrontEnd Server FQDN of Lync 2010 FrontEnd Server role. Conferencing Policy Lync 2010 Conferencing Policy. External Access Policy Lync 2010 External Access Policy. Peer-to-Peer Audio Video Enable or Disables Peer to Peer A/V. Registrar Pool FQDN of your lync registrar pool. SIP Domain Lync 2010 SIP domain. Archiving Policy Lync 2010 Archiving Policy SipAddressType Choose your Lync SIP address type Zohno, Inc. 10

11 Client version policy Lync 2010 Client version policy PIN Policy Lync 2010 PIN Policy Location Policy Lync 2010 Location Policy Client Policy Lync 2010 Client Policy Custom Script Script Path Local script path of your script. No spaces are allowed in the path. Make sure Set- ExecutionPolicy unrestricted powershell command is set. Zohno, Inc. 11

12 Script Argument argument for the PowerShell script. This field is not required. Usually this is the SamAccountName. For example, if script path is c:\scripts\dosomething.ps1 and argument is SamAccountName, script command will be c:\scripts\dosomething.ps1 john.doe Zohno, Inc. 12