If you set up mailbox A in exchange 2003, and owner of mailbox A is domain user A. If domain user A gets disabled in active directory, but permissions to his/her mailbox were shared with 20 other users via AD or delegate rights - as far as I know the mailbox wont be deleted until purposelly deleted, therefore, would the 20 other users still be able to view the mailbox regardless of the fact the mailbox owner domain account has been disabled, or once the disabled user is disabled in AD, does the mailbox also become disabled?

Hi, As long as the mailbox owner is not deleted the other users should still be able to access the mailbox. Leif

Hi, As long as the mailbox owner is not deleted the other users should still be able to access the mailbox. Leif Is that not a security issue though? If the mailbox owner has had his domain account disabled - its been disabled for a reason - should other folk still be able to see that mailbox?

Hi, I don't really see that as a security issue. If the users were allowed to see the mailbox until the minute where the owner is disabled they would have been able to see everything anyway. If you see that as an issue you must remove all permissions from the mailbox at the same time you disable the owner. Leif

Yes, it's by designed. Other users who have the premission on the user A 's mailbox can also access his mailbox unless you disable the mailbox. Thanks, Simon