Connect to a disabled User's Mailbox

I am trying to connect a disabled users mailbox to a open active mailbox
scenario is
1. someone is no longer working at Company A
2. His boss wants to have access to that person's workspace.
I am looking for the powershell commands to link the person no longer employed to his boss (who currently is still working at the same company)
Thanks for any of your thoughts and ideas.

You can't do it.
You will have to create a Test AD Account to connect that disabled (Disconnected Mailbox) first and then give full access to your BOSS on that mailbox.
Cheers,
Gulab Prasad
Technology Consultant
Blog:
http://www.exchangeranger.com    Twitter:
  LinkedIn:
   Check out CodeTwo’s tools for Exchange admins
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Similar Messages

Connecting to a "disabled" exchange mailbox

in Exchange 2013, following this link:
http://technet.microsoft.com/en-us/library/jj863439(v=exchg.150).aspx
Supposedly we're supposed to be able to connect to the disabled mailbox.... but when we go to connect, the recently disabled mailbox doesn't show up in the list. Any idea's why?

Hi
Step 1 :Please run the following command to check the
status of the mailbox.
Get-mailboxstatistics -database "Mailbox Database"
| where {$_.displayname -like "user"} | fl
Step
2 : Please execute the first command and then the second command.
Get-MailboxStatistics -Database MDB02 | ForEach { Update-StoreMailboxState -Database $_.Database -Identity $_.MailboxGuid -Confirm:$false }
Get-MailboxStatistics -Database MDB02 | Where { $_.DisconnectReason -ne $null } | ForEach { Update-StoreMailboxState -Database $_.Database -Identity $_.MailboxGuid -Confirm:$false }
Then go and see the deleted mailbox on the dis connector container via ECP.
Note :On the both the commands you should have to mention the same DB name where the mailbox has been deleted .
Reply me if you have any queries .
Regards
S.Nithyanandham
Thanks S.Nithyanandham

Need Script to disconnect Mailbox of disabled users

Hi,
i have found this Script on Website
but i'm not able to modify it for our Exchange Server 2010.
I get Error
The Windows PowerShell snap-in 'Microsoft.Exchange.Management.Powershell.Admin' is not installed on this machine
an the mail contains a TXT File with this Text:
There are disabled accounts that have active mailboxes
, has been Disabled
Run Time: 00:00:24.38
It dont find list the disabled Accounts with Mailbox. But we have enought Mailboxed from disabled Users.
Hope someone can help
Here my script
$stopwatch = New-Object system.Diagnostics.Stopwatch
$stopwatch.Start();
$date = Get-Date -format MMddyy
$LogFile = "C:\Scripts\Ex\logs\LogFile_$date.txt"
$grouppath = "OU=de-DE,OU=Useraccounts,DC=intranet,DC=contoso,DC=com"
write-host "Please wait while I import the Exchange ManagementTools..."
if (-not (Get-PSSnapin Microsoft.Exchange.Management.Powershell.Admin -WarningAction SilentlyContinue -ErrorAction SilentlyContinue))
Add-PSSnapin Microsoft.Exchange.Management.Powershell.Admin
Import-Module ActiveDirectory
start-sleep -s 15
$DisabledAccounts = get-mailbox -resultsize Unlimited –ErrorAction SilentlyContinue –WarningAction SilentlyContinue | where {($_.UserAccountControl -eq "AccountDisabled, NormalAccount") –and ($_.RecipientTypeDetails –ne “RoomMailbox”)}
$Count = $DisabledAccounts.Count
Add-Content $LogFile "There are $Count disabled accounts that have active mailboxes"
Foreach ($Account in $DisabledAccounts)
else
$EmailAddress = $Account.PrimarySMTPAddress.tostring()
$Name=$Account.SamAccountName
#Disable-Mailbox $Account.SamAccountName -Confirm:$false
Add-Content $LogFile "$Name,$EmailAddress, has been Disabled"
$stopwatch.Stop();
$ts = $StopWatch.Elapsed
$elapsedtime = [system.String]::Format("{0:00}:{1:00}:{2:00}.{3:00}", $ts.Hours, $ts.Minutes, $ts.Seconds, $ts.Milliseconds / 10);
Add-Content $LogFile "Run Time: $elapsedtime"
#Email the logfile to the messaging Group as an attachment
#Replace the $To with whoever you want to receive the email (group, etc)
$smtp = "ex01.intranet.contosp.com"
$To = "Messaging Team <[email protected]>"
$From = $To
$Subject = "Termed users for $Date"
$att = $Logfile
$body = "Here is today's logfile"
send-MailMessage -SmtpServer $smtp -To $to -From $from -Subject $subject -Body $body -Attachments $att -BodyAsHtml -Priority high

Hi,
Glad to hear the good news, thanks for updating!
Best regards,
Belinda Ma
TechNet Community Support

Setting a Transport Rule to reply with a Custom DSN for a Disabled User and disconnected mailbox

Here is what I am trying to accomplish. A user leaves the company. We disable there exchange email and that in turn disabled the account in AD. We want a custom NDR to say "This employee is no longer and employee blah blah" We dont get rid of email
boxes but we disable them.
Here is what I done. Created custom NDR and then created a transport rule to read if the message is sent to [email protected] reply back with this NDR code. It works fine if I disable the user from AD and not exchange. Once I "disconnect" the mailbox
it no longer works. I get the default NDR that says this email cant be found. I don't want that one. I want my custom NDR. I don't want to modify the 5.1.1 message either. Is there away around this?

Hi Nellyjo,
In your case, when you disable the user from AD and Exchange, in fact the message is blocked before reaching transport rule, recipient filtering is blocking this email. If you still want to achieve your goal by transport rule, you need to create a mailbox
or contact to make your transport rule work.
What's more, you also can modify original DSN for external and internal senders to meet your requirement.
For more information, here is a similar thread for your reference.
Setting a Transport Rule to reply with a Custom DSN for a Disabled User
http://social.technet.microsoft.com/Forums/en-US/b1a4dd86-1e0e-43a9-b340-a80352e5c323/setting-a-transport-rule-to-reply-with-a-custom-dsn-for-a-disabled-user?forum=exchange2010
Hope it helps.
If you need further assistance, please feel free to let me know.
Best regards,
Amy
Amy Wang
TechNet Community Support

Exchange 2010 disconnect AD user from mailbox and reconnect the mailbox to a new copy of the same user with a different username

How can i get the following done:
Exchange 2010 disconnect AD user from mailbox and reconnect the mailbox to a new copy of the same user with a different username?
i nmust do this for 16 users TODAY, SO PLEASE HELP ME OUT HERE.
Thanks in advance!!
kind regards,
Rene Veldman
System Administrator Teidem bv, The Netherlands.

Rene,
Why are you not changing the username of the existing account, instead of deleting the existing one and creating a new one?
If you truly need to delete and create new, you can save the GUID for the mailbox (Get-MailboxStatistics <mailbox alias> | Fl MailboxGuid), mail disable the existing account (Disable-Mailbox <mailbox alias>
will work), clean the mailbox database it was hosted on (Clean-MailboxDatabase
<database name>), then create your new account and recover the existing mailbox to that new account (Connect-Mailbox -Identity <Guid from before> -Database <Database name> -User <SAM account name of new account> -Alias
<what you wish to set the alias to>). In PowerShell, for all steps, you would do the following:
$MbxAlias = <mailbox alias>
$NewMbxAcct = <SAM Account Name for new account>
$NewMbxAlias = <new alias for mailbox>
$DomCtrl = (dir env:\LOGONSERVER).Value.Substring(2)
$MbxGuid = (Get-MailboxStatistics $MbxAlias -DomainController $DomCtrl).MailboxGuid
$MbxDb = (Get-Mailbox $MbxAlias -DomainController $DomCtrl).Database
Disable-Mailbox $MbxAlias
Clean-MailboxDatabase $MbxDb
Connect-Mailbox -Identity $MbxGuid -Database $MbxDb -User $NewMbxAcct -Alias $NewMbxAlias -DomainController $DomCtrl
You will need to supply the information in bold in the above commands, and you will need to create the new account before you run the above commands. I include direct use of a specific domain controller so you won't need to worry about replication.
If you are changing the account from one domain to another, this will not help, and you will need to wait for replication throughout the process, running the commands individually.

Disabled User Password should not be changed

Hi,
We have a requirement that only if the user's status is active, then only administartor must be able to change the user password. Admin should not be able to change the password if the user is in disabled state/locked state.How can we achieve this?please sugest...
Regards
Vinoth

Hi,
We have made an entity adapter which is taking usr login value from User[in Data object manager] and calling our java method which is making connection to OIM database and getting us the status of user.
Now if the status of user is disabled method is returning true and on true we have associated our error code to it.
We are executing our entity adapter in pre-update execution.
Now when we are changing password of any disabled user we are able to see our error code. But what ever update [either first name update, enable] we are running on that user same error code is appearing.
Plesae suggest/reply.
thanks

Remove GrantSendOnBehalfTo disabled user accounts - A novice at scripting

Hello. Can anyone help please
In our exchange 2010 environment we have users who are granted send on behalf to access. Obviously some users leave and I m finding that there are ghosts left behind which are causing issues with our team who add users into the grantsendonbehalfto
option using the EMC. Using the log view we coy out the command and then remove the disabled user from the command and then paste this into an Exchange Powershell command line. This wrks because it is doing what Exchange EMC does which is rewrites
the -GrantSendOnBehalfTo option in it new entirety.
The problem occurs because I need to remove these en-mass from approx 700 plus accounts.
I have tried to modify one user in order to get the script to work but it doesn't.
This is the error message that happens when I run the script below against a known account with at least 2 disabled users in:-
Couldn't find object "xxxxxxxx.xx.xxxxxxx.xxx.xx/DisabledUsers/2013-08/Gaynor Collins-Punter". Please make sure that i
was spelled correctly or specify a different object. Reason: The recipient xxxxxxxx.xx.xxxxxxx.xxx.xx/DisabledUsers/2
13-08/Gaynor Collins-Punter isn't the expected type.
+ CategoryInfo : NotSpecified: (:) [], ManagementObjectNotFoundException
+ FullyQualifiedErrorId : F6498844
+ PSComputerName : ex02-0029.xx.xxxxxxx.xxx.xx
Am running the script from my local PC
This is the script I have used.
# Gather info use get-mailbox -resultsize unlimited$mailboxes = Get-Mailbox zplew1
Foreach($mailbox in $mailboxes)
for($i = ($mailbox.GrantSendOnBehalfTo.count)-1; $i -ge 0; $i--)
$address=$mailbox.GrantSendOnBehalfTo[$i]
$addressString=$address.addressString
If($addressString -like "*disabled*")
$mailbox.GrantSendOnBehalfTo.removeat($i)
$info >> "C:\Scripts\grantsendonbehalfto.csv"
$mailbox |set-mailbox -GrantSendOnBehalfTo $mailbox.grantsendonbehalfto
}If you requiere any more info please let me know.

#1 - I recommend posting in xchange forum fo rhow to do this
#2 - Wen an account is disabled most on the information in the object is hidden. YOu would need to undelete to use the object.
#3 - Get list as text and validaye al values are not deleted accounts. Remove deleted and save back.
¯\_(ツ)_/¯

Error: ORA-01436: CONNECT BY loop in user data.... with EnableVersioning

Hi everyone,
i'm having some troubles when i execute DBMS_WM.EnableVersioning() procedure for all of the tables from my database.
This is the sql line....
EXEC DBMS_WM.EnableVersioning('SAN.SAN_AMPLIAC_ANULAC, SAN.SAN_ANALISISCALIDAD, SAN.SAN_ANALISISCALIDAD_LTS, SAN.SAN_ANALISISCALITEM, SAN.SAN_ANALISISCAMARA, SAN.SAN_APLICACION, SAN.SAN_APLICACION_ORDEN, SAN.SAN_APLI_ORD_ITEM', 'VIEW_WO_OVERWRITE');
And the error is:
ORA-01436: CONNECT BY loop in user data
ORA-06512: at "SYS.LTDDL", line 1464
ORA-06512: at "SYS.LTDDL", line 1289
ORA-06512: at "SYS.LT", line 796
ORA-06512: at "SYS.LT", line 8374
ORA-06512: at line 2
If somebody knows how to fix it, please let me know.
Thanks in advance,
Jime.

Hello Ben!
Thanks for answer me. I need to fix this as soon as possible.
Thank you.
Jime
[email protected]
Here are the answers to your questions:
1. i'm using Oracle 9i
2.
NAME VALUE
ALLOW_CAPTURE_EVENTS OFF
ALLOW_MULTI_PARENT_WORKSPACES OFF
ALLOW_NESTED_TABLE_COLUMNS OFF
CR_WORKSPACE_MODE OPTIMISTIC_LOCKING
FIRE_TRIGGERS_FOR_NONDML_EVENTS ON
NONCR_WORKSPACE_MODE OPTIMISTIC_LOCKING
OWM_VERSION 9.2.0.2.0
USE_TIMESTAMP_TYPE_FOR_HISTORY ON
3.
OWNER CONSTRAINT_NAME CONSTRAINT_TYPE TABLE_NAME SEARCH_CONDITION R_OWNER R_CONSTRAINT_NAME DELETE_RULE STATUS DEFERRABLE DEFERRED VALIDATED GENERATED BAD RELY LAST_CHANGE INDEX_OWNER INDEX_NAME INVALID VIEW_RELATED
SAN FK_ANALISISCALIDAD_1 R SAN_ANALISISCALIDAD SAN PK_SAN_GRADO CASCADE ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED USER NAME 9/22/2003 1:15:11 PM
SAN FK_ANALISISCALITEM_1 R SAN_ANALISISCALITEM SAN PK_SAN_RUBRO CASCADE DISABLED NOT DEFERRABLE IMMEDIATE NOT VALIDATED USER NAME 9/22/2003 1:15:16 PM
SAN FK_ANALISISCALITEM_2 R SAN_ANALISISCALITEM SAN PK_ID_SERVICIO CASCADE ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED USER NAME 9/22/2003 1:15:16 PM
SAN FK_ANALISISCALITEM_3 R SAN_ANALISISCALITEM SAN PK_ANALISISCALIDAD CASCADE ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED USER NAME 9/22/2003 1:22:39 PM
SAN FK_ANALISISCAMARA_1 R SAN_ANALISISCAMARA SAN PK_SAN_CLIENTE_PARTE_ROL CASCADE ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED USER NAME 9/22/2003 1:15:14 PM
SAN FK_ANALISISCAMARA_2 R SAN_ANALISISCAMARA SAN PK_ANALISISCAMARA CASCADE ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED USER NAME 9/22/2003 1:22:21 PM
SAN FK_ANALISISCAMARA_3 R SAN_ANALISISCAMARA SAN PK_ANALISISCALIDAD CASCADE ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED USER NAME 9/22/2003 1:22:21 PM
SAN FK_SAN_APLICACION_ORDEN R SAN_APLI_ORD_ITEM SAN PK_SAN_APLICACION_ORDEN NO ACTION ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED USER NAME 6/19/2003 5:34:46 PM
SAN FK_SAN_ORDEN_ITEMS R SAN_APLI_ORD_ITEM SAN PK_SAN_ORDEN_ITEMS NO ACTION ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED USER NAME 6/19/2003 5:34:48 PM
SAN PK_ANALISISCALIDAD P SAN_ANALISISCALIDAD ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED USER NAME 9/22/2003 1:15:11 PM PK_ANALISISCALIDAD
SAN PK_ANALISISCALITEM P SAN_ANALISISCALITEM ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED USER NAME 9/22/2003 1:15:16 PM PK_ANALISISCALITEM
SAN PK_ANALISISCAMARA P SAN_ANALISISCAMARA ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED USER NAME 9/22/2003 1:15:13 PM PK_ANALISISCAMARA
SAN PK_APLIC_ORDEN_ITEM P SAN_APLI_ORD_ITEM ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED USER NAME 6/19/2003 5:34:11 PM PK_APLIC_ORDEN_ITEM
SAN PK_SAN_APLICACION_ORDEN P SAN_APLICACION_ORDEN ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED USER NAME 6/19/2003 5:34:20 PM PK_SAN_APLICACION_ORDEN
SAN SYS_C0019582 C SAN_APLICACION_ORDEN "DENOMINACION" IS NOT NULL ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED GENERATED NAME 6/19/2003 5:08:54 PM
SAN SYS_C0019586 C SAN_APLI_ORD_ITEM "ORDEN" IS NOT NULL ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED GENERATED NAME 6/19/2003 5:08:55 PM
SAN SYS_C0019587 C SAN_APLI_ORD_ITEM "CONDICION" IS NOT NULL ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED GENERATED NAME 6/19/2003 5:08:55 PM
SAN SYS_C0020519 C SAN_APLICACION_ORDEN "ID_APLICACION_ORDEN" IS NOT NULL ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED GENERATED NAME 6/19/2003 5:31:45 PM
SAN SYS_C0020520 C SAN_APLI_ORD_ITEM "ID_APLICACION_ORDEN" IS NOT NULL ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED GENERATED NAME 6/19/2003 5:31:45 PM
SAN SYS_C0020521 C SAN_APLI_ORD_ITEM "ID_APLI_ORD_ITEM" IS NOT NULL ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED GENERATED NAME 6/19/2003 5:31:45 PM
SAN SYS_C0020522 C SAN_APLI_ORD_ITEM "ID_ITEM" IS NOT NULL ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED GENERATED NAME 6/19/2003 5:31:45 PM
SAN SYS_C0021509 C SAN_ANALISISCALIDAD "ID_ANALISISCALIDAD" IS NOT NULL ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED GENERATED NAME 8/11/2003 6:42:52 PM
SAN SYS_C0021512 C SAN_ANALISISCALITEM "ID_ANALISISCALITEM" IS NOT NULL ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED GENERATED NAME 8/11/2003 6:42:52 PM
SAN SYS_C0021790 C SAN_ANALISISCAMARA "ID_ANALISISCALIDAD" IS NOT NULL ENABLED NOT DEFERRABLE IMMEDIATE VALIDATED GENERATED NAME 9/3/2003 1:09:39 PM
4.
OWNER CONSTRAINT_NAME TABLE_NAME COLUMN_NAME POSITION
SAN FK_ANALISISCALIDAD_1 SAN_ANALISISCALIDAD ID_GRADO 1
SAN FK_ANALISISCALITEM_1 SAN_ANALISISCALITEM ID_RUBRO 1
SAN FK_ANALISISCALITEM_2 SAN_ANALISISCALITEM ID_SERVICIO 1
SAN FK_ANALISISCALITEM_3 SAN_ANALISISCALITEM ID_ANALISISCALIDAD 1
SAN FK_ANALISISCAMARA_1 SAN_ANALISISCAMARA ID_CLIENTEPARTEROL 1
SAN FK_ANALISISCAMARA_2 SAN_ANALISISCAMARA ID_ANALISISCALIDAD 1
SAN FK_ANALISISCAMARA_3 SAN_ANALISISCAMARA ID_ANALISISCALIDAD 1
SAN FK_SAN_APLICACION_ORDEN SAN_APLI_ORD_ITEM ID_APLICACION_ORDEN 1
SAN FK_SAN_ORDEN_ITEMS SAN_APLI_ORD_ITEM ID_ITEM 1
SAN PK_ANALISISCALIDAD SAN_ANALISISCALIDAD ID_ANALISISCALIDAD 1
SAN PK_ANALISISCALITEM SAN_ANALISISCALITEM ID_ANALISISCALITEM 1
SAN PK_ANALISISCAMARA SAN_ANALISISCAMARA ID_ANALISISCALIDAD 1
SAN PK_APLIC_ORDEN_ITEM SAN_APLI_ORD_ITEM ID_APLI_ORD_ITEM 1
SAN PK_SAN_APLICACION_ORDEN SAN_APLICACION_ORDEN ID_APLICACION_ORDEN 1
SAN SYS_C0019582 SAN_APLICACION_ORDEN DENOMINACION
SAN SYS_C0019586 SAN_APLI_ORD_ITEM ORDEN
SAN SYS_C0019587 SAN_APLI_ORD_ITEM CONDICION
SAN SYS_C0020519 SAN_APLICACION_ORDEN ID_APLICACION_ORDEN
SAN SYS_C0020520 SAN_APLI_ORD_ITEM ID_APLICACION_ORDEN
SAN SYS_C0020521 SAN_APLI_ORD_ITEM ID_APLI_ORD_ITEM
SAN SYS_C0020522 SAN_APLI_ORD_ITEM ID_ITEM
SAN SYS_C0021509 SAN_ANALISISCALIDAD ID_ANALISISCALIDAD
SAN SYS_C0021512 SAN_ANALISISCALITEM ID_ANALISISCALITEM
SAN SYS_C0021790 SAN_ANALISISCAMARA ID_ANALISISCALIDAD

Read other user's mailbox on MS Exchange through JavaMail

Hi All,
I have a problem on trying to read other user's mailbox on MS Exchange through JavaMail.
I am using administrator to connect to MS Exchange server and try to use Store.getUserNamespaces(java.lang.String user) to get another user's folder but it return nothing... however when I used Store.getPersonalNamespaces(), it works...
I have grant the full control permission of the user for the administrator. I can use administrator to see other user's mailbox through MS outlook. And I also try to connect to MS Exchange through Netscape Mail client(a standard IMAP mail client).Unfortunately netscape mail client can not see other user's mailbox though other functionality works well...
I suspect MS Exchange does not fully support IMAP. does anyone has idea on this isssue? Please give me some comment...
Thanks very much in advance...

Hi, I know that it is almost 2 years ago that you put your question. But I am very interested whether you found a solution because I encountered the same problem as you had.

Disable Inbox Rules for Disable Users

I have found that when our helpdesk disables an AD user account (terminated employee) that has an Outlook inbox rule to forward the email to an email address outside the organization, emails sent to the former employee are still forwarded to that outside
email address. I would like to run a script each day that queries AD for all disabled accounts, removes any forwarding SMTP adresses, then removes all mailbox inbox rules. I have been trying to use get-aduser against a DC and export the list of
disabled users, this works fine. I then take that csv, import it and use -foreach-object to set the forwarding smtp address to null. I would then like to use the same csv file to run the -removeinbox rule command against the list. I am having
a hard time time combining the commands I need into a PS script that works against both AD and Exchange.
Anyone have some powershell kung fu to assist me? Thank you!
~Eric

Hi Eric,
According to your description, I understand that you want a script to get a list of disabled AD user, then removes any forwarding SMTP addresses, then removes all mailbox inbox rules.
We can run following command to get a list of disabled AD user in PowerShell:
Get-ADUser -Filter 'Enabled -eq "false"' | select name,userprincipalname
More details about “How Can I Get a List of All the Disabled User Accounts in Active Directory? “, for your reference:
http://blogs.technet.com/b/heyscriptingguy/archive/2005/05/12/how-can-i-get-a-list-of-all-the-disabled-user-accounts-in-active-directory.aspx
Also, run below command to disable forwarding SMTP address and inbox rule:
Get-Mailbox -Identity xxxx | Set-Mailbox -DeliverToMailboxAndForward $false
Get-InboxRule –Mailbox xxxx | remove-InboxRule
However, we recommend use this disable AD user to disable mailbox.
By the way, this question will related to the script of Exchange server, please contact relevant team so that you can get more professional suggestions. For your convenience:
http://technet.microsoft.com/en-us/scriptcenter/dd742246.aspx
Best Regards,
Allen Wang

Disabled user commands

Hi All, I have a strange situation here. We are running Essbase 6.5.1 on Win2K. Whenever a user tries to COPY a db from App Manager. It halts all operations on the essbase server. It doesn't allow any new connection, and any user trying to connect either get a hanging screen or a msg saying "Administrator has temporarily disable user commands" Any leads on this message will be helpful. Thanks in advance Maneesh Hari

We also run Essbase 6.5.1 on Win2K platform.Essbase is set up to freeze any activity (access to essabse.sec file, calc runs...) during a database copy to avoid any db/file corruption. Thus, it is not a bug but standard "behaviour".To avoid that, Hyperion advised us to upgrade to 7.0.1 in order to setup several Essbase agents. When db copy is performed, only activities related to concerned essbase agent would be frozen. I have not tested this theory but I would be interested in getting confirmation of this 7.0.1 feature.

Disable exchange 2007 mailbox

Hi all,
I got the requirement to not only disable accounts in Active Directory but to disable their mailbox as well. So they should not be able to receive messages while they are unable to access their mailbox.
I'm a lucky guy, so I found this entry in the changelog, regarding patch 10 for 8.0:
"21203 exchange 2007: allow disable of a mailbox without deleting the AD user"
This sounds exactly like the solution to my requirement, but sadly I failed to find any documentation? So it is nice that I'm able to disable a mailbox, but HOW can I do this?
Any help would be greatly appreciated.
CU,
Patrick.

Hi Patrick-
I believe what you'll want to do is: check out the "RecipientType" for the user(s) in questions and change it from: 'UserMailbox' to 'User'. This should disable the mailbox without deleting the AD user. This was the change/functionality brought on by bug # 21203.
You'll need 7.1.1.18 or later, 8.0.0.10 or later, or 8.1.0.4 or later.
Regards,
Alex

Can an AD-disabled user still use Lync?

Lync 2013 Server/ Lync 2013 Client.
Here's the scenario: A Lync-enabled user leaves the company. After they're gone, the AD account is disabled. A couple of days later, another user notices that the user who had left is still visible in Lync AND their presence green (i.e.
available.) The assumption is that the former user has Lync running on their home PC..
Is this normal? I assumed that if the AD account of the Lync user were disabled, the user would no longer be able to use Lync. For instance, the disabled user can no longer access their mailbox even though the mailbox still exists.
So why would it be different for Lync?
We ended up having to specifically disable the Lync account of the former user, but why should this even be necessary?
Thanks in advance..

This is entirely possible.
Also take a look at this post: http://www.expta.com/2011/03/disabling-user-in-ad-does-not-disable.html
Basically to ensure a user is disabled in Lync, you should disable them on the Lync Server, not just rely on disabling them in AD.
If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer"
Georg Thomas | Lync MVP
Blog www.lynced.com.au | Twitter
@georgathomas
Lync Edge Port Check (Beta)
This forum post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Disabled user

Hi, I contacted BT today for a couple of things, and one of the questions I asked was about disability and the problems my wife would have using the phone if I was not around, my wife has problems with understanding and following multi choice options on BT, I registered my wife as Disabled with BT and explained her problems with the multi choice option when contacting BT and he just registered her as a disabled user and that was it, what does my wife do if I am not around and she needs to contact BT? is there a special number she can ring that goes direct to someone or does she have to wait until I am home? any help please.

Hi sollie52 and welcome
Well, with most multiple choice automated phone services, if no buttons are pressed, then eventually it should just ring and someone should answer
If that doesn't work, pressing the * button when prompted to make a selection, used to confuse the system and it would also just connect the call.
Next time you need to call BT, try the above...
If either work, just tell your wife which one to do
-+-No longer a forum member-+-

ADAM disable user setADAMAttributesInLDAP(): null=testadamuser001

Hi All,
I get the following problem when running disable user
ADAM disable user setADAMAttributesInLDAP(): null=testadamuser001
instead of CN = testadamuser001
I am faced with null=testadamuser001
Any Ideas/Comments why this happens.
Thanks in advance.
Find the full stack trace available
Regards,
Vinod
Running Disable ADAM User
tcUtilADTasks::disableADAMUser() Enter
tcUtilADTasks::getObjectByObjectGUID() Enter
tcADUtilLDAPController::search() Enter
tcADUtilLDAPController::getPath() Enter
tcADUtilLDAPController::getPath() Exit
tcADUtilLDAPController::connectToAvailableAD() Enter
tcADUtilLDAPController::hashTableEnvForDirContext() Enter
tcADUtilLDAPController::hashTableEnvForDirContext() Exit
tcADUtilLDAPController::hashTableEnvForLDAPContext() Enter
tcADUtilLDAPController::hashTableEnvForLDAPContext() Exit
tcADUtilLDAPController::validateCertificates() Enter
tcADUtilLDAPController::validateCertificates() Exit
Critical Extensions Supported
tcADUtilLDAPController::invalidateSSLSession() Enter
tcADUtilLDAPController::invalidateSSLSession() Exit
tcADUtilLDAPController::connectToAvailableAD() Exit
tcADUtilLDAPController::disconnect() Enter
tcADUtilLDAPController::disconnect() Exit
tcADUtilLDAPController::search() Exit
tcUtilADTasks::getObjectByObjectGUID() Exit
tcADUtilLDAPController::getCanonicalName() Enter
tcADUtilLDAPController::removeOrgFromRootContext() Enter
tcADUtilLDAPController::removeOrgFromRootContext() Exit
tcADUtilLDAPController::getCanonicalName() Exit
tcUtilADTasks::checkHierarchy() Enter
tcUtilADTasks::checkHierarchy() Exit
tcADUtilLDAPController::getAttributeValues() Enter
tcADUtilLDAPController::getPath() Enter
tcADUtilLDAPController::getPath() Exit
tcADUtilLDAPController::connectToAvailableAD() Enter
tcADUtilLDAPController::hashTableEnvForDirContext() Enter
tcADUtilLDAPController::hashTableEnvForDirContext() Exit
tcADUtilLDAPController::hashTableEnvForLDAPContext() Enter
tcADUtilLDAPController::hashTableEnvForLDAPContext() Exit
tcADUtilLDAPController::validateCertificates() Enter
tcADUtilLDAPController::validateCertificates() Exit
Critical Extensions Supported
tcADUtilLDAPController::invalidateSSLSession() Enter
tcADUtilLDAPController::invalidateSSLSession() Exit
tcADUtilLDAPController::connectToAvailableAD() Exit
tcADUtilLDAPController::getAttributeValues() Exit
tcADUtilLDAPController::setADAMAttributesInLDAP() Enter
tcADUtilLDAPController::getPath() Enter
tcADUtilLDAPController::getPath() Exit
tcADUtilLDAPController::connectToAvailableAD() Enter
tcADUtilLDAPController::hashTableEnvForDirContext() Enter
tcADUtilLDAPController::hashTableEnvForDirContext() Exit
tcADUtilLDAPController::hashTableEnvForLDAPContext() Enter
tcADUtilLDAPController::hashTableEnvForLDAPContext() Exit
tcADUtilLDAPController::validateCertificates() Enter
tcADUtilLDAPController::validateCertificates() Exit
Critical Extensions Supported
tcADUtilLDAPController::invalidateSSLSession() Enter
tcADUtilLDAPController::invalidateSSLSession() Exit
tcADUtilLDAPController::connectToAvailableAD() Exit
tcADUtilLDAPController::modifyAttributes() Enter
The error occured in tcADUtilLDAPController::modifyAttributes():[LDAP: error code 32 - 0000208D: NameErr: DSID-031001E4, problem 2001 (NO_OBJECT), data 0, best match of:
    'OU=OU-XXXXX,OU=YY,DC=XXXXXXX,DC=PP,DC=MM'
ERROR,27 aug 2009 07:43:15,231,[OIMCP.ADCS],The error occured in tcADUtilLDAPController::setADAMAttributesInLDAP():
null=testadamuser001
doesn't exists:[LDAP: error code 32 - 0000208D: NameErr: DSID-031001E4, problem 2001 (NO_OBJECT), data 0, best match of:
    'OU=OU-XXXXX,OU=YY,DC=XXXXXXX,DC=PP,DC=MM'
tcADUtilLDAPController::disconnect() Enter
tcADUtilLDAPController::disconnect() Exit
AD User disable operation failed:Connection Error
tcUtilADTasks::disableADAMUser() Exit

Hi Saggu,
I checked all the look ups and they seem to be fine.
I am using 9101 connector of AD.
Lookup definition for AD.Parameter is as follows
MultiValueAttributes     memberOf
MultiValueAttributesConfiguration     ,
UserObjectConfiguration     |
LdapUserObjectClass     user
LdapGroupMember     member
LdapUserDNPrefix     cn
Pagesize     100
I am clueless as to why or where from null comes in. Create Delete and other operations are working fine.
Ive even checked AtMAP.ADAM and it looks ok.
Regards,
Vinod

Connect to a disabled User's Mailbox

Similar Messages

Maybe you are looking for