Return
-
Title
Error: "Object reference not set to an instance of an object" when trying to set msExchHideFromAddressList -
Description
The following error appears when trying set attribute "msExchHideFromAddressList":
The issue cannot be reproduced in Active Roles v6.9.
-
Cause
Any user object with no OnPrem Microsoft Exchange attributes will get the following error when setting attribute "msExchHideFromAddressList":"Administrative Policy returned an error. Object reference not set to an instance of an object"
Active Roles does not set attribute "msExchHideFromAddressList" for Exchange Online users.
The reason it works in Active Roles v6.9 is because that version leverages MAPI to work with Exchange attributes. However, Active Roles 7.X uses the Exchange cmdlets. In Active Roles 7.X since it is an Exchange native attribute, Active Roles assumes there is Exchange and tries to use the Exchange cmdlets to update it. -
Resolution
There is an existing Enhancement request #125877 to make this work in a future version of Active Roles 7.X, "As an administrator I should be able to update the msExchHideFromAddressLists for Exchange online mailbox (hybrid)".
As a workaround this could be customized using a script module in an onPreModify to check for that attribute. If it's being modified, remove it from the request and use the AD cmdlets or a direct ADSI call to AD to update it.
See sample below:function onDeprovision($Request)
{
if ($Request.Class -ne "User"){return}
if ($Request.Get("msExchHideFromAddressLists") -eq $true){return}
$User = $Request.Get("DistinguishedName")
Set-ADUser -Identity $User -Replace @{msExchHideFromAddressLists = $true}
}
function onUnDeprovision($Request)
{
if ($Request.Class -ne "User"){return}
if ($DirObj.GetInfoEx(@("msExchHideFromAddressLists"),0) -eq $true){return}
$User = $Request.Get("DistinguishedName")
Set-ADUser -Identity $User -Clear msExchHideFromAddressLists
} -
Change Request
TF00125877