Hide Exchange Servers from Active Roles (4258768)

It some scenarios it may be necessary to prevent Active Roles from connecting to specific Exchange Servers in an environment.

While Active Roles does not currently provide a method to configure which Exchange Servers it can utilize, the issue can be worked around by preventing Active Roles from discovering the specific Exchange Servers in Active Directory.

To prevent Active Roles from discovering an Exchange Server, follow the guidance below:

1. Open ADSIEdit.msc, right-click on ADSI Edit, and then Connect to...
2. In the Connection Settings window, under the Select a well known naming context dropdown field, select Configuration and ensure the correct domain is specified under Computer
3. Expand Configuration | CN=Configuration | CN=Services | CN=Microsoft Exchange | CN=| CN=Administrative Groups | CN=Exchange Administrative Group | CN=Servers
4. Locate the desired Exchange server in the list, and deny the ARS Service Account read permissions to the object
5. Restart the Active Roles service