Hi everyone, I removed someone from our network because that person will no longer be with our company. However after removing this person from our network, the user can still access his e-mail for hours if the Outlook.exe program is left open on his/her machine - Even when OWA does not work. I've tried several ways and tests to not allow the user to make any connection with the network - such as changing his network password and closing out the VPN (works if the user is connected via VPN off-network) - no success. One thing to note however, if the user restarts his outlook.exe he will not be able to send/receive e-mails. Any thoughts on how I can remove a user from accessing e-mail immediately even if the user is on/off the network/domain. Thanks! -Jacky

The situation is similar to this thread: http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/9a36022e-8843-42f4-a4a6-7c137d450eff/ I want to remove the user from any rights to the mailbox. I want to retain all information within the mailbox still. I do not want any incoming or outgoing mail. Problem: If the user leaves his outlook.exe open during any of these operations; he/she can still send/receive e-mails. I thought that maybe it would just take time for the network to be updated... but if the user cannot access OWA how can the user be able to send/receive e-mails through the application?

Hi Jacky: Per your description, what do you mean by I removed someone from our network.? Suppose that you disable one user account or remove one user account on DC Server, and your exchange server is EX2003. 1. When the OUTLOOK use MAPI to connect to the exchange server, the client end and the exchange server will cache some authentic information that authorized by DC (GC). So if you remove the user account, and the outlook has been opened before it, the outlook can be used unless you restart the IS service. You also can restart the outlook on the client end, and then the outlook no longer be used to send/receive mail. 2. Through the OWA to access the mailbox, it will be authorized by DC (GC) whatever operation you do. So, you cant use OWA after you remove the user account. 3. Other method you can disable the MAPI feature of one user, but it is complexity to achieve the target. You can refer to below link: http://technet.microsoft.com/en-us/library/bb219050(EXCHG.65).aspx

Thanks for the reply Gavin, I don't believe restarting the IIS service (I believe that is what you meant) would be most ideal because if someone were to be sending an e-mail at the time of restart, that person would receive an error from the server. I am using EX2007 and what I meant to say was that I disabled his account from the AD. Thanks again, Jacky

Disable the mailbox and not just the user account. A mailbox connected to a disabled account is still fully functional; this is how most resource mailboxes are set up. If you disable the mailbox the user will not be able to send or receive almost immediately. You can then reconnect the mailbox to another account so you can get the information out of it.TBrennan