A ghost hand?

[Guest]

Here is story.
Our sa left company, he created a contact item in user of Active Directory, he added his email address to forward
his email. Then later, boss asked me forwarding this guy's email to him, so I replaced email address with boss's email
in this contact item. After ten mins, I found the emaill address was changed back to sa's email. I changed again and it was changed back again. I checked the schedule tasks, no suspicious job in there. Could anyone give some ideas for what is
going on? thanks!
DW

 

[Scott Harding - MS MVP]

Are you auditing logins/logoffs? Sounds like he still has a valid account.
Be sure to change password on all admin accounts. Typically service accounts
for backup or exchange/sql are ones that have elevated priviliges but rarely
have there passwords changed.

--
Scott Harding
MCSE, MCSA, A+, Network+
Microsoft MVP - Windows NT Server

Here is story.
Our sa left company, he created a contact item in user of Active

Directory, he added his email address to forward

his email. Then later, boss asked me forwarding this guy's email to him,

so I replaced email address with boss's email

in this contact item. After ten mins, I found the emaill address was

changed back to sa's email. I changed again and it was changed back again. I
checked the schedule tasks, no suspicious job in there. Could anyone give
some ideas for what is

 

[Eric Phillips]

Hey DW,

Sounds like it may be a bit less sinister then Scott's suspicion, it sounds
like you just need to uncheck "Automatically update e-mail addresses based
on recipient policy" on the e-mail addresses tab for that contact.
Recipient policies allow you to create e-mail addresses automatically based
on the user's details, such as username, first name, last name, etc.


Let us know if that does the trick.



Eric Phillips

 

[Guest]

Thanks for your guys response.
The forwarding email address appears on General tab of properties of the contact object,
there is no check box for me to uncheck "Automatically update e-mail addresses based
on recipient policy". But I found other interesting thing. On the object tab of the properties,
there is a note on the top says "Update sequence numbers (USNs) are used to track changes to objects
stored in Active Directory", then down the bottom are the number of original USN and current
USN. I guess this might did the trick. how can I change this or temperoray disable and enable it
after I modify the email address. Thanks
DW

----- Eric Phillips wrote: -----

Hey DW,

Sounds like it may be a bit less sinister then Scott's suspicion, it sounds
like you just need to uncheck "Automatically update e-mail addresses based
on recipient policy" on the e-mail addresses tab for that contact.
Recipient policies allow you to create e-mail addresses automatically based
on the user's details, such as username, first name, last name, etc.


Let us know if that does the trick.



Eric Phillips

 

[Eric Phillips]

Hi DW,

Sorry I did not explain my idea well enough. Firstly I am assuming you are
using Microsoft Exchange 2000 or 2003.

The address on the general tab is just for reference, it does not have a
direct hand in controlling where mail is forwarded. If you do have
Exchange, and you go to the E-Mail Addresses tab you will see one e-mail
address in bold, that will be the e-mail address that keeps replacing that
field on the General tab, just change that one to the correct forward.

If you do not see the E-mail addresses tab, and have multiple servers, make
sure to be on the server that has Exchange installed on it.

I just modeled what you are doing, changing the e-mail field on the General
tab, but did not change it in E-mail addresses, and watched the field on the
general tab change to the default address on the e-mail addresses tab right
in front of me.

Eric Phillips

 

[Guest]

Thanks Eric! I found it, just did as you have said, it worked. Very appreciate it!

 

[Scott Harding - MS MVP]

Ahh...good call. Wasn't reading the question close enough. Thanks for the
catch!