How to disable AD account without deleting user's mailbox in Office365?

[ilikeike]

One of our users recently switched roles to a new position where they will not need computer access anymore, except for checking emails. I need to disable their AD account while not removing their Outlook login or mailbox.

My first thought was to remove the proxyAddress attribute value in AD, do a sync, then disable the user. Will this work or is there more that goes into it?

I can't find a straight answer on google and don't want to risk losing their mailbox.

[#2]

@ilikeike you can convert that user to a cloud only user and disable his account on premises in that way the user will still be able to login to his email and his account on prem will remain disabled

Please click Mark as Best Response & Like if my post helped you to solve your issue. This will help others to find the correct solution easily.

[#3]

So would the best way to do that be to remove the user from a synched OU, then restore the account in 365 admin portal? Or does disabling the user in AD directly have the same effect?

[#4]

if the user will not use his account to login to computer. you can disable the user from on prem the account will be disabled on cloud but the mailbox will remain available he cant access it . if you want him to access it just clear the immutable id from his account on the cloud and his account will be a cloud only account and can access his mailbox

[#5]

or you can remove the user from the synced OU and disable it and run the sync , you will see the user in the deleted folder , go and retore it and the user will be available as a cloud only user with no reference for him from on premises

[#6]

@ilikeike 

Please click Mark as Best Response & Like if my post helped you to solve your issue. This will help others to find the correct solution easily.

[#7]

@ilikeike 

Can consider disabling account on-prem and changing the mailbox on Cloud to a shared mailbox if the size is allowed (there is a limitation on shared mailbox) and assign necessary access if needed