Forum Discussion
Disabled account OU
Hello
We have a scenario for which I need help
User account was disabled and was in Disabled account OU
when she joined back it was enabled and moved to proper user account OU.This is synched from onpremise in O365
The earlier mailbox is converted from user mailbox to a cloud mailbox.This is a incloud object
How do we proceed here
We want the shared mailbox to be linked to the user account which was disabled earlier.
Regards,
2 Replies
Your employee’s on-premises AD account is synchronized again, but the former mailbox appears to be a separate cloud shared-mailbox object. The issue is object identity: Exchange cannot link two Entra objects merely because an SMTP address or username matches. Do not delete either object. Compare the synchronized user’s Entra Object ID with the shared mailbox’s ExternalDirectoryObjectId, and record the ExchangeGuid and SMTP address. If the shared mailbox remains anchored to the same user object, convert it back to a regular mailbox, assign an Exchange Online license, and allow directory synchronization to finish. If the IDs differ, do not hard-match or change ImmutableId blindly; that can disconnect or duplicate the mailbox. Grant the returning user Full Access and Send As temporarily, then open a Microsoft 365 support case to validate the reassociation path using both object IDs and ExchangeGuid. A tenant-specific merge cannot be confirmed safely from this description alone.
You can soft/hard match the user. Soft match is based on the Primary SMTP Address, mail or UPN (requires additional configuration: https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-syncservice-features#userprincipalname-soft-match ). Hard match is based on the "anchor" value, objectID/mS-Ds-ConsistencyGuid:
