You can configure settings related to Messaging Records Management (MRM) for an Exchange Online mailbox in the Exchange Online Properties > Mailbox Settings tab of the Active Roles Web Interface. MRM settings are typically configured to meet mailbox archiving policies in effect within the organization.
For more information about MRM in Exchange Online, see Messaging records management in the Microsoft Exchange Online documentation.
To configure Messaging Records Management settings for an Exchange Online mailbox
-
On the Active Roles Web Interface, navigate to Directory Management > Tree View > Azure > <azure-tenant> > Azure Users (or Azure Guest Users).
-
From the list in the middle pane, select the Azure user or Azure guest user that you want to update.
-
To open the Exchange Online properties of the selected Azure user or guest user, click Exchange Online Properties on the right pane.
-
To open the MRM settings, click the Mailbox Settings tab.
Figure 10: Exchange Online Properties > Mailbox Settings — Accessing the MRM settings of an Exchange Online mailbox
-
Under Mailbox Settings, make sure that Messaging Records Management is selected, then click Properties. The Messaging Records Management dialog opens.
-
To enable placing the entire contents of the user mailbox on hold, enable the Enable litigation hold check box. For more information on the Litigation Hold feature of Exchange Online, see the In-Place Hold and Litigation Hold page of the official Microsoft documentation.
-
(Optional) If your organization has an internal resource on the litigation hold practices, specify its URL in the Messaging records management description URL text box.
-
(Optional) If you want to display a customized message in Outlook for the mailbox user on the litigation hold, write the message in the Comments text box.
-
Click Save to apply your changes and close the Messaging Records Management dialog.
-
To close the Exchange Online Properties window, click Close.
You can use the Active Roles Management Shell to create a new user.
To create a new Azure AD user with the Management Shell interface
-
On the Management Shell interface, run the New-QADUser cmdlet.
-
To create and enable a new Azure AD user, run this cmdlet with the additional AzureUserAccountEnabled, AzureOffice365Enabled, and AzureAssociateTenantId Boolean parameters.
-
To retrieve and update Azure properties, the edsvaAzureObjectID attribute with correct value is required.
For more information on creating a new Azure AD user using the Management Shell interface, see the Active Roles Management Shell Help.
Example: Creating a new Azure AD user
C:\PS> New-QADUser -name 'user64' -ParentContainer 'CN=Users,DC=SS64,DC=com' -UserPassword 'Pass123w0rd' -AzureUserAccountEnabled $true -AzureOffice365Enabled $true -AzureUserPrincipalName 'user64@Azuredomain'-AzureAssociatedTenantId 'f918cb6c-275a-4815-8863-d7cbb90598b2'
Example: Adding additional attribute using -attr @{}
C:\PS> New-QADUser -name 'user64' -ParentContainer 'CN=Users,DC=SS64,DC=com' -UserPassword 'Pass123w0rd' -AzureUserAccountEnabled $true -AzureOffice365Enabled $true -AzureUserPrincipalName 'user64@Azuredomain' -AzureAssociatedTenantId 'f918cb6c-275a-4815-8863-d7cbb90598b2' -attr @{edsaAzureUserGivenName='user64';edsaAzureUserUsageLocation='IN'}
You can use the Active Roles Management Shell to modify attributes of an Azure AD user in Active Directory.
To update the Azure AD user properties with the Management Shell
For more information on modifying an Azure AD user using the Management Shell interface, see the Active Roles Management Shell Help.
NOTE: The Set-QADUser cmdlet does not work for Azure attributes in Synchronized Identity and Federated environment.
You can use the Active Roles Management Shell to retrieve all Azure AD users in a domain or container that match the specified conditions.
To view the Azure AD user properties with the Management Shell
For more information on viewing the Azure AD users using the Management Shell interface, see the Active Roles Management Shell Help.
