Phillip Renouf - Blog » Technical

Updated Exchange 2010 Storage and Role Calculator

phillip — Sat, 23 Jan 2010 06:36:18 +0000

The Exchange team posted an updated version of the Exchange 2010 Storage and Role calculator over on the MS Exchange Team blog. Plenty of updates, but Ross does a much better job of describing it that I would, so check out his entry for all of the details.

Fine Grained Password Policies and Password Expiry

phillip — Mon, 29 Jun 2009 08:14:26 +0000

I was working with a customer recently to implement a new Fine Grained Password policy for their administrative and elevated accounts. This new policy would force those admin accounts to change their password every 42 days rather than the standard 90 days that their default policy enforced. When we implemented this new policy we changed a few passwords and went to look at what the acctinfo32.dll reporting showed for password expiry. Typically on a changed password this tool would show that the password would expire in 90 days and we wanted to show that our policy was working fine and displaying 42 days. Except when we looked at the users it was still showing that the password would expire in 90 days.

This had us puzzled as it was obvious that the policy was being applied since we also enforced those users to have a longer password than normal. We scratched our heads for a while, but then we set to some testing. We changed the MaximumPasswordAge to be 5 minutes, then changed a users password. Right away we knew this was going to work because as soon as we logged in we got the message from the desktop that our password was going to expire that day. Still, we waited the 5 minutes and sure enough, even though acctinfo was showing 90 days, our password expired as expected.

It looks like many tools that display password expiry are looking at the default policy and don’t yet take Fine Grained Password policies into account when constructing that information. I have no idea if there will ever be an updated version of the acctinfo.dll or not, but this might be something to keep in mind as you are implementing Fine Grained Password policies.

Fine Grained Password policy links:

AD DS: Fine-Grained Password Policies

AD DS Fine-Grained Password and Account Lockout Policy Step-by-Step Guide

How to change the username associated with a Windows Mobile 6 device

phillip — Wed, 21 Nov 2007 22:13:18 +0000

I was just asked how to change the username that is associated with Mobile Outlook on a Windows Mobile 6 device and was surprised that you couldn’t just edit the connection and do that. It took me a bit of digging, but here is the process to do that on my HTC 5800 (works on a HTC S720, same device), I haven’t tested it on anything else:

To change the username you need to delete the Exchange sync relationship on the device (cant sync to two exchange mailboxes at the same time). Open ActiveSync then:

Menu>Options>Menu>Delete

You get an Alert message, click Yes and your sync relationship will be deleted. Once that is done you can follow the steps above to create a new one (associate with a new username).