Validate Exchange Properties

Question

Hi,

Within the view user web interface form the Exchange properties are very useful, but I can't find a way to limit/validate any changes made in there.

For example, I would like administrators to be able to change the primary email address (using the Set As Reply) button, but not add/remove addresses. Are there any hooks via Business Rules or Property Patterns for this section?

Thanks

Answer 1

Hello,

To achieve what you want, you can create a Business Rule triggered before modifying e-mail addresses that will cancel any attempt to modify e-mail addresses if an operation other than changing the primary address was attempted. To create such a Business Rule:

1. Create a new Business Rule.

2. On the 2nd step of the Create Business Rule wizard, select User and Before Modifying Exchange properties of a User.
   

3. On the 3rd step, add the Run a program or PowerShell script action.

4. Paste the following script in the Script field. The script will perform all the checks and cancel the operation, if necessary.
   

    $cancelReason = "You are not allowed to modify, add or delete SMTP addresses for the recipient. You can only assign a new primary address." # TODO: modify me
   
    # Get Exchange properties set by the action
    $modifiedMailboxParams = $Context.Action.MailParameters
   
    if (-not($modifiedMailboxParams.EmailAddressesModificationEnabled))
    {
        # E-mail addresses are not modified
        return
    }
   
    # Get the modified e-mail addresses
    $modifiedAddressesCollection = $modifiedMailboxParams.EmailAddresses
    if (-not($modifiedAddressesCollection.OverrideOldValues))
    {
        $Context.Cancel($cancelReason)
        return
    }
   
    $modifiedEmailAddresses = New-Object "System.Collections.Generic.HashSet[System.String]"([System.StringComparer]::OrdinalIgnoreCase)
    for ($i = 0; $i -lt $modifiedAddressesCollection.Count; $i++)
    {
        $operation = "ADS_PROPERTY_NONE"
        $modifiedEmailAddress = $modifiedAddressesCollection.GetAddress($i,[ref]$operation)
        $modifiedEmailAddresses.Add($modifiedEmailAddress)
    }
   
    # Get the current e-mail addresses
    $mailboxParams = $Context.TargetObject.GetMailParameters()
    $emailAddresses = $mailboxParams.EmailAddresses
   
    # Compare the number of e-mail addresses
    if ($modifiedAddressesCollection.Count -ne $emailAddresses.Count)
    {
        $Context.Cancel($cancelReason)
        return
    }
   
    # Compare the lists of the modified and current e-mail addresses
    for ($i = 0; $i -lt $emailAddresses.Count; $i++)
    {
        $operation = "ADS_PROPERTY_NONE"
        $emailAddress = $emailAddresses.GetAddress($i,[ref]$operation)
        $modifiedEmailAddresses.Remove($emailAddress) | Out-Null
    }
   
    if ($modifiedEmailAddresses.Count -ne 0)
    {
        $Context.Cancel($cancelReason)
        return
    }
   

5. Enter a short description for the script and click OK.

6. Finish creation of the Business Rule.