A user leaving the organization is something that all our customers have to find a method of dealing with. There is no official guidance on the best way to deal with this because it varies depen...
Updated Jul 01, 2019
Version 2.0
Blog Post
I actually sent a query to you guys regarding this matter. Maybe this blog is in reponse to that ...
However, the issue of how to deal with mail being delivered when the account is disabled has not been addressed! Stating the following doesn't help much:
"The following article tells you how to set this value"
I think that any Exchange admin should know this info already or cn find it as indicated. However the problem isn't how to fix the problem when you're notified about it, it is how to determine when it has happened.
In any organisation of a certain size or larger the Exchange admin is probably a different person to the one who disabled the user account. That doesn't even consider the fact that maybe it is an automated system that when HR mark the employee as left the organisation the account is disabled. What about accounts being disabled due to a policy for extended leave or even disabled by over eager admins by mistake?
So you get the situation of corporate email working fine. Important info flowing into users mail ok. User is disabled (for any reason). Mail stops flowing. Time passes. Sometime much later event log entry found/admin notified of bounce message/process informs admin of disabled account. Knowledge base article followed to enable mail to flow into disabled user's mailbox.
Why can't it be a global setting to say on/off "Mail flows to disabled account mailboxes"?
What solution do you propose for determining when the account is disabled and automatically setting the MSExchangeMasterAccountSID value?
-Kevin
However, the issue of how to deal with mail being delivered when the account is disabled has not been addressed! Stating the following doesn't help much:
"The following article tells you how to set this value"
I think that any Exchange admin should know this info already or cn find it as indicated. However the problem isn't how to fix the problem when you're notified about it, it is how to determine when it has happened.
In any organisation of a certain size or larger the Exchange admin is probably a different person to the one who disabled the user account. That doesn't even consider the fact that maybe it is an automated system that when HR mark the employee as left the organisation the account is disabled. What about accounts being disabled due to a policy for extended leave or even disabled by over eager admins by mistake?
So you get the situation of corporate email working fine. Important info flowing into users mail ok. User is disabled (for any reason). Mail stops flowing. Time passes. Sometime much later event log entry found/admin notified of bounce message/process informs admin of disabled account. Knowledge base article followed to enable mail to flow into disabled user's mailbox.
Why can't it be a global setting to say on/off "Mail flows to disabled account mailboxes"?
What solution do you propose for determining when the account is disabled and automatically setting the MSExchangeMasterAccountSID value?
-Kevin