Z-Hire V4 Administration Guide

Transcription

1 Z-Hire V4 Administration Guide The main purpose of Z-hire is to allow for fast account deployment. Usually when an administrator provisions a new user account, multiple consoles are used to get the job done. This app uses a template concept that allows for system administrators to save frequently-used settings for multiple IT systems. With just a click of the button, your Exchange mailbox, and Active directory and Lync account and SalesForce account will be created simultaneously. Z-Hire serves as the platform for new hire accounts by allowing auto-creation of major IT accounts with the option for custom scripts. Requirements System Requirements - Windows 7 X64 (Domain Joined) - Windows Server 2008 X64 (Domain Joined) - Windows Server 2008 R2 X64 (Domain Joined) Permission Requirements For on-premise systems, Z-Hire uses current logon windows credentials to create user accounts avoiding the hassle to enter credentials manually. This is why you must run Z-hire on domain joined computer and logged on using credentials with below permissions: - Ability to create Active Directory user (Active Directory Account Operator) - Ability to create Exchange Mailbox (Exchange Recipient Administrator) - Ability to create / enable Lync user (CSAdministrator) Supported Environments - Active Directory (all versions) - Exchange 2007 (all versions) - Exchange 2010 (all versions) - Lync 2010 (both Standard and Enterprise versions) - SalesForce Cloud PowerShell Remoting

2 - PowerShell remoting is usually enabled by default, but please make sure it is enabled on your Exchange and Lync servers you are connecting to. - Ensure all Exchange/Lync Servers are enabled for PS remoting. This is done by running "Enable-Psremoting" powershell command on Exchange/Lync server you wish to connect to. - Fill out "Environment Config" portion of the form. Use "File" > "Save Environment Config" to save configuration to select template. - Use Options > Environment Auto Discover to automatically load environment configuration. Templates Templates feature allows an administrator to easily save a set of commonly-used user information. This speeds up the account deployment process. For example, you can set a template for each business department like Marketing and as a marketing template, you may select a list of marketing Active Directory group, marketing mailbox database, marketing users Active Sync Policy, etc. Load Template Settings Use the drop down box to simply load template settings.

3 Save Template Settings Use File > Save Configuration to save template settings. Settings will be saved to current template. Rename Template Name To rename template names, use Options > Rename Templates Hide / Unhide Systems You may hide unused systems by going to OPTIONS > Show/Hide Systems

4 . Active Directory

5 [ENVIRONMENT CONFIG] New Users AD OU This is a DN of an OU where new Active Directory users will be created. Example: ou=newusers,dc=mydomain,dc=net

6 UPN Suffix This is your AD domain name in FQDN format. This will be used for Active Directory account upn suffix. Example: mydomain.net. This domain will automatically append to UPN field under User Information. User Account Formats Here you can specify the user account format for your AD environment. Use variables to set the format you wish. For example, if your Displayname format is Doe, John use %lastname%, %firstname%. Variables must be in lowercase and spaces will have an end effect. Default Password This is the password that will be set for the new AD account. Make sure this meets your domain password complexity requirements. Must change password at next logon This is the same as ADUC console option for must change password at next logon. [USER CONFIG] TAB 1 Office - This set the Office Active Directory attribute for the new AD account. Street - This set the Street Active Directory attribute for the new AD account. City - This set the City Active Directory attribute for the new AD account. State / Province - This set the State Active Directory attribute for the new AD account. Zip / Postal Code - This set the Zip code Active Directory attribute for the new AD account. Country / Region - This set the Country Active Directory attribute for the new AD account. Account Disabled Disables the new AD Account. Password never expires Set new AD account status to password never expires. Company This set the Company Active Directory attribute for the new AD account. Department - This set the Department Active Directory attribute for the new AD account. Manager - This is a SamAccountName or Displayname of the manager.

7 Notes - This set the Notes Active Directory attribute for the new AD account. [USER CONFIG] TAB 2 Profile Path - This set the profile of the AD account. Logon script - This set the logon script of the AD account. Home Folder Path This sets the home folder path for AD account, then it creates the folder with specified permissions. You may use variables here such as %username%. Example: Netapp01\users\%username% Remote Access Permission- This set the remote access permission for the new AD account. [USER CONFIG] TAB 3 departmentnumber - This set the departmentnumber attribute of the AD account. division - This set the division attribute of the AD account. employeeid - This set the employeeid attribute of the AD account. employeenumber - This set employeenumber attribute of the AD account. employeetype - This set the employeetype attribute the AD account. JPG Photo - This set the jpegphoto and thumbnailphoto attribute of the AD account. Note that this photo must be less than 10k in size and 96x96 pixels. This photo is usually used for Outlook and Lync. Exchange 2007

8 Exchange 2007 Management Shell Exchange 2007 Management Shell must be installed on a computer that is running Zohno Z-hire. Mailbox Database Exchange 2007 Mailbox Database, example: EX01\Storage Group1\DB1 Managed Folder Policy Exchange 2007 Managed Folder Policy ActiveSync Policy Exchange 2007 ActiveSync Policy Additional SMTP Address Full SMTP address of the additional SMTP address, example: SuperMan@zohno.com CustomAttribute1 Set Exchange Mailbox CustomAttribute1

9 Hidden from GAL Hide Exchange Mailbox from Global Address List Grant full access permission Same as running Add-MailboxPermission fullaccess Grant send on behalf of Same as running Add-ADPermission Forward to SamAccountName of user where mail will be forwarded to Issue warning at Issue warning at quota for the mailbox. If this field is blank, it will use Database default quota Prohibit Send at Prohibit Send at quota for the mailbox. If this field is blank, it will use Database default quota Prohibit send and receive at Prohibit send and receive at quota for the mailbox. If this field is blank, it will use Database default quota Keep deleted items for Keep deleted items for quota for the mailbox. If this field is blank, it will use Database default quota Exchange 2010 Exchange 2010 Server FQDN of Exchange 2010 CAS or Mailbox Server. Mailbox Database Exchange 2010 Mailbox Database, example: MailboxDatabase01 Archive Database Exchange 2010 Archive Mailbox Database. If this field is set, archive mailbox will be created for user.

10 Retention Policy Exchange 2010 Retention Policy. ActiveSync Policy Exchange 2010 ActiveSync Policy Managed Folder Policy Exchange 2010 Managed Folder Policy Additional SMTP Address Full SMTP address of the additional SMTP address, example: CustomAttribute1 Set Exchange Mailbox CustomAttribute1 Hidden from GAL Hide Exchange Mailbox from Global Address List Grant full access permission Same as running Add-MailboxPermission fullaccess Grant send on behalf of Same as running Add-ADPermission Forward to SamAccountName of user where mail will be forwarded to Issue warning at Issue warning at quota for the mailbox. If this field is blank, it will use Database default quota Prohibit Send at Prohibit Send at quota for the mailbox. If this field is blank, it will use Database default quota

11 Prohibit send and receive at Prohibit send and receive at quota for the mailbox. If this field is blank, it will use Database default quota Keep deleted items for Keep deleted items for quota for the mailbox. If this field is blank, it will use Database default quota Lync 2010 Lync 2010 FrontEnd Server FQDN of Lync 2010 FrontEnd Server role. Conferencing Policy Lync 2010 Conferencing Policy. External Access Policy Lync 2010 External Access Policy. Peer-to-Peer Audio Video Enable or Disables Peer to Peer A/V. Registrar Pool FQDN of your lync registrar pool. SIP Domain Lync 2010 SIP domain. Archiving Policy Lync 2010 Archiving Policy SipAddressType Choose your Lync SIP address type

12 Client version policy Lync 2010 Client version policy PIN Policy Lync 2010 PIN Policy Location Policy Lync 2010 Location Policy Client Policy Lync 2010 Client Policy Custom Script Script Path Local script path of your script. No spaces are allowed in the path. Make sure Set- ExecutionPolicy unrestricted powershell command is set. Also do not use write-host command in the script, use Add-Content to write to a logfile instead. Script Argument argument for the PowerShell script. This field is not required. Usually this is the SamAccountName. For example, if script path is c:\scripts\dosomething.ps1 and argument is SamAccountName, script command will be c:\scripts\dosomething.ps1 john.doe

13