Update specific property for a user is not working during deprovision.

Question

I have a deprovision policy which is supposed to update the property msExchHideFromAddressLists to True. This property takes boolean values only. When deprovisioning a user however, the policy fails to update this specific property. 
 What could be the reason for this?

Terrance.Crombie · Answer

Sorry, I see this now. 
 This does look to be related to Defect ID 125877, which is currently flagged to be resolved in Active Roles 7.4.3. 
 I don't have a firm release date on that version at this time.

jessie salgado · Answer

I had to use a work around. I created a script which uses the Set-ADUser cmdlet. The Set-RemoteMailbox cmdlet does not work as we synchronize Active Directory to the cloud. The two functions I created are as follows: 
 function onDeprovision($Request)
{
 if ($Request.Class -ne "User"){return}
 if ($Request.Get("msExchHideFromAddressLists") -eq $true){return}
 
 $User = $Request.Get("DistinguishedName")
 Set-ADUser -Identity $User -Replace @{msExchHideFromAddressLists = $true}

}


function onUnDeprovision($Request)
{
 if ($Request.Class -ne "User"){return}
 if ($DirObj.GetInfoEx(@("msExchHideFromAddressLists"),0) -eq $true){return}
 
 $User = $Request.Get("DistinguishedName")
 Set-ADUser -Identity $User -Clear msExchHideFromAddressLists
} I then set the deprovision policy and undo deprovision policies to run these scripts.

Endpoint Privilege Management

Update specific property for a user is not working during deprovision.