分层通讯簿
功能介绍 在Outlook中可以查看通讯簿中组织结构,效果如下
启用或禁用分层通讯簿
重要的几个命令:
Set-OrganizationConfig -HierarchicalAddressBookRoot "Contoso,Ltd" 一定要设置Root
Set-Group -Identity "Contoso,Ltd" -IsHierarchicalGroup $true 开启或禁用,User不需要开启
Set-Group -Identity "Human Resources" -SeniorityIndex 100 根据Index排序
Set-User -Identity "[email protected]" -SeniorityIndex 100
Limitation
对于Local Exchange Server中的Group和Office 365中Cloud-based Group是可以直接操作的
如果Office 365配置了AD Synchronization,操作Sync from Active Directory的Group会遇到下面两种异常:
1. The group "xxx" can‘t be managed by recipient "Organization Management". The owner of the group should have the following recipient type details: xxx,xxx...
原因:group在AD中没有设置ManagedBy,Office365账号没有权限操作group
解决办法: 在AD中设置ManagedBy属性
2. The action ‘Set-Group‘, ‘IsHierarchicalGroup‘, can‘t be performed on the object ‘xxx‘ because the object is being synchronized from your on-premises organization. This action should be performed on the object in your on-premises organization.
原因:因为Active Synchronization正在生效,不能修改group
解决办法:Deactivate directory synchronization(https://msdn.microsoft.com/en-us/library/azure/dn144760.aspx)
Set-MsolDirSyncEnabled -EnableDirSync <Boolean>
命令完全生效需要等待72小时
所以操作执行结束后,重新开启Active Directory synchronization即可。
MemberShip会被覆盖,与AD中的保持一致,IsHierarchicalGroup没有变化,其他属性没有变化