Dear Exchange Server Expert,

I am currently using Windows Server 2008 R2 as AD server and Our exchange is Microsoft Exchange 2010 SP1. Currently, I am trying to delete the user account that has just resigned. However, I am unable to delete it. Below are the steps of deletion that I tried to perform:

1. Disable the resigned user account (Only Disable not Remove).

2. Go to AD Server and try to delete the AD Account that belong to that specific user. However, it was failed and it mentions that there is exchange activesync that still attached to that user account. Please refer to the picture below. I know that those users were having their exchange email being installed before in their mobile devices. how to get rid of them?

3. I also check and confirm that there is no setting to prevent accidental deletion being configured.

4. To double confirm about the existence of exchange activesync account, I tried to view the AD as the containers and found that there are active sync device that attached to this user account. However, I am not able to delete it.

is there any procedures that I need to do before able to delete users account?

Thanks.

Regards,

Have you tried deleting it using the Exchange Management Shell or the Exchange Managemen

Hi,

Please try to re-enable this user account, then use the method mentioned in the following document to remove ActiveSyncDevice

https://technet.microsoft.com/en-us/library/aa998591(v=exchg.141).aspx

If you cannot remove ActiveSyncDevice from EMC or EWS, perhaps your account doesnt have the proper permission. Make sure your account be in the Recipient Management role group.

Then try to disable this user account and remove AD account from ADSIEdit.

Best Regards.

Hi,

Refer to the below article to Permanently delete a disconnected mailbox

https://technet.microsoft.com/en-us/library/jj863440(v=exchg.150).aspx

Hi,

Refer to the below article to Permanently delete a disconnected mailbox

https://technet.microsoft.com/en-us/library/jj863440(v=exchg.150).as

Hi Henry ,

Please locate the user on the domain partition in the active directory with the help of the ADSI edit tool .Then there you can able to find out the containers for active sync devices.On that container you can delete the devices which is associated to that account.

Once it is done we can delete the user account from active directory through dsa.msc console.

In case through ADSI edit if you cant able to delete the active sync attributes you can straight away try to delete the user account through ADSI edit tool.

That might have been due to the user account having permissions inheritance blocked.  That can cause weird issues with creating device partnerships, so it might also cause the problem you'