How can the "ExchangeUserAccountControl" parameter be modified?
I currently run a script daily that disables users in AD for inactivity. When this script disables someone it does so just in AD and there account is still able to receive e-mail. This is exactly what we want.
Now, someone who was here before ran a similar script that he wrote, except all the users that were disabled by his script return undeliverables when you attempt to mail them. This is not how we want it to work and I don't have a copy of his script to see
what exactly it did.
What I have been able to tell is that the difference between an account disabled with my script and an account disabled by his script is that accounts that were disabled by his script have the "ExchangeUserAccountControl" parameter set to "AccountDisabled"
and the ones done my mine have this parameter set at "None."
I can't figure out how to undo this. How does one go about getting ExchangeUserAccountControl set back to None
May 7th, 2012 2:55pm
Hi,
you are able to disable an user account using Active Directory. This means that the account is able to receive new mails. Is you disable the account using Exchange mechanism then the Exchange specific attributes for this account are removed from the userraccount
but the useraccount itsself resides as enabled. So the mailbox data is removed.
So if you want to achive disabling the user and leave the possibility receiving mails you have zo disable the userraccount using Active Directory mechanism.
regards Thomas Paetzold visit my blog on: http://sus42.wordpress.com
Free Windows Admin Tool Kit Click here and download it now
May 7th, 2012 3:32pm
To further clarify... here is the output of a get-mailbox for an example user. This user was previously disabled by a script that I don't have access to. I have re-enabled the user in AD, but how do I get the mailbox back? It still shows as AccountDisabled...
May 7th, 2012 3:49pm
Hi,
as I mentioned above. If you disable an account using e.g. Exchange Management console then you remove the mailbox settings from the active directory userr. so the mailbox is deleted. Please have a look at the disconnected mailbox in Exchange management
Console. there you are able to reconnect the mailbox if you have configured a retention time for mailbox deletion.
If mailbox retention time is set to 0 then you have to restore the mailbox from the backup.
Kind regards.
Thomasregards Thomas Paetzold visit my blog on: http://sus42.wordpress.com
Free Windows Admin Tool Kit Click here and download it now
May 7th, 2012 3:53pm
The user is not in the Disconnected Mailbox list in Exchange Management Console, it is in the Mailbox list. It never was in the Disconnected Mailbox list.
If the user was in the Disconnected Mailbox list I couldn't have posted that screenshot as
Get-Mailbox would've errored out saying it couldn't find the user.
What I need to know is how to modify the "ExchangeUserAccountControl" parameter, because apparently that is what is making Exchange reject messages for these mailboxes.
Because I don't have access to the script that originally disabled these users, I don't know how that parameter even got changed. I really have no idea what the ExchangeUserAccountControl parameter even does or describes... I know disabling a user in AD
changes the UserAccountControl parameter but it doesn't seem to affect the ExchangeUserAccountControl.
May 7th, 2012 4:27pm
Hi
I think he changed the mailbox type, I tried convert a normal mailbox to a room mailbox, this parameter changed.
Could you please double check the parameter RecipientTypeDetails
Cheers
Zi FengZi Feng
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
May 8th, 2012 2:09am
Dang... I was hoping you were right. I checked it this morning when I got into work and both RecipientType and RecipientTypeDetails are set to UserMailbox.
Thanks, anyway.
May 8th, 2012 9:40am
Maybe I should start here... Can anyone explain to me the conditions that specifically cause the ExchangeUserAccountControl parameter to be set to AccountDisabled?
Free Windows Admin Tool Kit Click here and download it now
May 8th, 2012 3:50pm
Hi
When you Disable the user Account in AD, this parameter will change to AccountDisabled.
You could refer to Disable or enable a user account
http://technet.microsoft.com/en-us/library/cc781527(v=ws.10).aspx
Cheers
Zi FengZi Feng
TechNet Community Support
May 9th, 2012 1:40am
I have not seen that this is true. When I disabled an AD account the ExchangeUserAccountControl parameter does not change. The UserAccountControl parameter does, but not the ExchangeUserAccountControl.
Here is an example of an account after it was disabled in AD...
Free Windows Admin Tool Kit Click here and download it now
May 9th, 2012 9:46am
Hi
You should wait for a few minutes, it will not change immediately
CheersZi Feng
TechNet Community Support
May 9th, 2012 10:56pm