Exchange server 2003 SP2 disabled accounts
Does anyone know why undeliverable messages are not generated for disabled accounts. I have tried the SELF account havingaccess and without but I still do not get an undeliverable. With all the down sizing going on this is a real problem.
October 19th, 2009 9:31pm
You could completely remove an account. http://www.msexchange.org/tutorials/Remove-Exchange-server-entire-Exchange-organization.html Take a look at these blogs as well. http://blogs.technet.com/benw/archive/2007/07/09/exchange-2003-and-disabled-user-accounts.aspx http://msexchangeteam.com/archive/2006/02/17/419848.aspx Mark Morowczynski|MCT| MCSE 2003:Messaging, Security|MCITP:ES, SA,EA|MCTS:Windows Mobile Admin|Security+|http://almostdailytech.com
Free Windows Admin Tool Kit Click here and download it now
October 19th, 2009 9:56pm
The ability for mailboxes associated with disabled accounts to receive email is generally seen as a desirable feature. Resource mailboxes are often configured this way. Microsoft even provides hotfixes to ensure that it happens: http://support.microsoft.com/kb/916783/ If you really want the recipient address to generate NDRs, archive the mailbox and delete it. Tony
October 19th, 2009 10:14pm
Hi,This is theexpected behaviour in Exchange server 2003 SP2.Before SP2, the NDR can be received when send the email to the disable account. That is because the account doesnt have the msExchMasterAccountSid attribute after the user has been disabled. If there is no msExchMasterAccountSid attribute, the messages cant be sent to the user. If we want to enable the account, we must have this field populated with a Windows NT Security Identifier (SID). At a minimum, the SELF SID must be in the attribute. So we need to grant Associated External Account permission to the SELF account to generate the msExchMasterAccountSid attribute. For this instruction, please refer to the KB:http://support.microsoft.com/kb/319047After SP2, the issue has been fixed and the NDR will not be received when sending the email to the disabled account.http://support.microsoft.com/kb/916783ThanksAllen
Free Windows Admin Tool Kit Click here and download it now
October 21st, 2009 12:49pm