Manage Email Signatures Centrally - For All Users

Jonny Heyninck

Hi,

I have an issue with deploying emailsignature on our domain.
We have a forest, with 3 subdomains, for exchange server reasons we installed a global catalog server in each site.
When launching sign.exe in the principal site it tries to use LDAP in on subdomain DC's....
I tried to set reg key's to force the root parameter (LDAP://DC=xxx,dc=xxx for all Pc's in each domain, pointing to the correct one. This way the correct DC is addressed but the sign.exe in no langer able to detect group membership !!!!!!!!

Thx for feedback !

Bjarne Mess · Posted: Sun Jan 18, 2009 5:09 pm Post subject:

Hi Johnny,

This is by design. When using the root key, this overrules all other domain entries, and hence not able to locate the GC centrally.

The suggested approach now is simply to have 3 setups one for each domain, and then run it seperately. I cannot think of any other way of doing it, but it is also a very special setup. I might need a bit more effort to get up and running, but once it is there, you won't really face issues with it.

Thanks.

Jonny Heyninck · Posted: Mon Jan 19, 2009 7:55 am Post subject:

Hi again,

Setting up seperate domains is not an option for us, domains have to be hooked up. Also separate installs for the emailsignature product is not an option because the GC selection even goes wrong in a single site.

I configured some clients as a test to get outlook to point to a manually selected GC, and outlook uses the correct one with this setting (a local GC)...but sign.exe does not.
What happens is that (checked logging from sign.exe) when the "Begin finding user DN" starts it sometimes selects as "User path LDAP://DC:xxx,DC:xxx" an LDAP value that's one from a subdomain....?! This is why i started of using the "root" value in the registry...

Is there any way to get sign.exe pointing to a local global catalog instead of a remote one (subdomain) ?

Bjarne Mess · Posted: Mon Jan 19, 2009 4:58 pm Post subject:

Can you please try to put in the GC in the field 'root' in table 'rootcontext'? Does that help?

Jonny Heyninck · Posted: Tue Jan 20, 2009 11:28 am Post subject:

Hi,

Idd, when setting the rootcontext value to the LDAP:// local domain, group member detecting works fine again.

Thx a lot.

Bjarne Mess · Posted: Tue Jan 20, 2009 12:27 pm Post subject:

Great stuff!

Thanks for feedback.
Bjarne