DRAG DROP
Your network contains four servers. The servers are configured as shown in the following table.
You create a new user account for a temporary user named User1. You plan to create a new mailbox
for User1. You need to recommend which actions must be performed to ensure that User1 can
modify only the values of his home phone number attribute and his office location attribute. In
which order should you perform the actions?
To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
Explanation:
Run the new-managementrole -parent mycontactinformation -name role1 command.
Run the remove-managementroleentry role1\set-user command.
Run the add-managementroleentry role1\set-user -parameters office, homephone command.
Run the new-roleassignmentpolicy -name policy1 -roles mybaseoptions, role1, myvoicemail,
mytextmessaging, myteammailboxes, mymarketplaceapps, mydistributiongroupmembership
Run the New-Mailbox cmdlet.
CONSENSUS OF AGREEMENT WITH THE ORDER OF :
Run the New-ManagementRole -Parent
MyContactInformation -Name Role1
Run the Remove-ManagementRoleEntry
Role1 Set-User command
Run the Add-ManagementRoleEntry Role1Set-User
-Parameters Office, Homephone
Run the New-RoleAssignmentPolicy -Name Policy1
-Roles MyBaseOptions, Role1,
MyVoiceMail, MyTextMessages, MyTeamMailboxes,
MyMarketPlaceApps, MyDistributionGroupMembership
BUT NOT WITH THE ORDER OF :
Run the New-Mailbox cmdlet
First or last place
ORIGINAL SUPPLIED ANSWER FROM ANONYMOUS PLACED THE NEW-MAILBOX CMDLET IN LAST
PLACE
MyContactInformation ManagementAssign Roles to Users
In addition to giving permissions to resources for administrators, RBAC is also used in Exchange
Server to delegate access to end users.
Your end users typically won’t be modifying Exchange server settings or organization settings.
However, they may need to modify their personal information, such as address or phone number, or
they may need permissions to manage their own distribution groups. In order to do this, you will
need to assign roles to your users.
Users aren’t added to role groups like adminstrator accounts are. Instead users are assigned roles by
using a role assignment policy. Each user account can have only one role assignment policy defined.
Exchange defines a default role assignment policy. The default role assignment policy allows users to
manage OWA settings, contact information, voice mail, text messaging, and distribution group
membership. In most cases, the default policy will suit your needs.
You have the option of creating your own role assignment policy and assigning your own roles to it.
You can override the default policy for user accounts and use your custom policy instead.
Using a custom role assignment policy involves three steps:
1. Create the new role assignment policy
To create a new role assignment policy, you can use the New-RoleAssignmentPolicy
2. Add roles to the policy
3 Assign the policy to the users who you want it to apply to.
Management RolesThis output shows you that the management role assignment policy called Default Role Assignment
Policy is linked with five management roles called MyBaseOptions, MyContactInformation,
MyVoiceMail, MyTextMessaging and MyDistributionGroupMembership.
Each of these management role names should be reasonably self-explanatory in what the roles are
designed to allow the user to do but the table below serves to emphasize this information as it
contains the five management role names together with their default descriptions.
Management Role Description
MyBaseOptions This role enables individual users to view and modify the basic configuration of their
own mailbox and associated settings.
MyContactInformation This role enables individual users to modify their contact information,
including address and phone numbers.
MyVoiceMail This role enables individual users to modify their voice mail settings.
MyTextMessaging This role enables individual users to create, view, and modify their text messaging
settings.
MyDistributionGroupMembership This role enables individual users to view and modify their
membership in distribution groups in an organization, provided that those distribution groups allow
manipulation of group membership.
Run the New-Mailbox cmdlet
Use the New-Mailbox cmdlet to create a user in Active Directory and mailbox-enable this new user.
Mailboxes are assigned a single role assignment policy.
When a mailbox is assigned a role assignment policy, the assignments between management roles
and a role assignment policy are applied to the mailbox.
This grants the mailbox all of the permissions provided by the management roles.
For new mailboxes, the RoleAssignmentPolicy parameter of the New-Mailbox cmdlet can be used to
specify the name of the management role assignment policy to be used when that mailbox is first
created.
If no specific policy name is applied when creating a new mailbox, the default management role
assignment policy will be applied.
New mailboxes are assigned the default assignment policy even if the policy hasn’t been assigned
management roles.
http://technet.microsoft.com/en-AU/library/dd638076(v=exchg.150).aspx
To change the assignment policy that’s assigned to a mailbox, use the following syntax.
Set-Mailbox <mailbox alias or name> -RoleAssignmentPolicy <assignment policy>
This example sets the assignment policy to Unified Messaging Users on the mailbox Brian.
Set-Mailbox Brian -RoleAssignmentPolicy “Unified Messaging Users”
In this question it appears that a Set-Mailbox statement is missing in order to change the assignment
policy on a particular mailbox
e.g Set-Mailbox user1 -RoleAssignmentPolicy -name role1
LEFT NEW-MAILBOX COMMAND AT THE END OF THE LIST IN ABSENCE OF
Run the new-mailbox cmdlet should be last.
When you create an assignment policy, you can assign it to users using the New-Mailbox, Set-Mailbox, or Enable-Mailbox cmdlets. If you make the new assignment policy the default assignment policy, it’s assigned to all new mailboxes that don’t have an explicit assignment policy assigned to them. This one is not default, and the mailbox has not been created yet, so run new-mailbox last.
https://technet.microsoft.com/en-us/library/dd638101%28v=exchg.150%29.aspx