Link to home
Start Free TrialLog in
Avatar of ajruiz
ajruiz

asked on

Disabled Accounts showing up in Global Address List

We are on Exchange 2003 with clients using Outlook 2000/2003.  We have users that have been disabled months ago and are still showing up in the Global Address List.  I have checked Exchange Experts and other posts and it has nothing to do with cached information and the offline address book because I have checked with non-cached users.

What determines whether or not a user shows up in the global address list?  I hope I don’t have to go to each disabled user and check “hide from address book”.   We do have calendar resources where the calendar resource account is disabled but the mailbox is active by selecting “Associated External Account” on SELF.  The Calendar Resources work fine in that they are disabled but they still show up in the Global Address List but regular user NT accounts are disabled and still show up the GAL even though their “Associated External Account” is not select on SELF.
Avatar of Sembee
Sembee
Flag of United Kingdom of Great Britain and Northern Ireland image

If the mailbox is active via the SELF setting then they will show in the GAL. This is because you can still send email to the account. However as the account is disabled you cannot assign calendar entries.
Therefore if you want the account to be removed from the GAL you will have to enable the option from the GAL.

Your only other option would be to do things with address books. This would mean sorting the disabled users or applying an attribute to them so that you can filter them out of the address book. Personally I don't see the point when the option to hide the entry is already there.

Simon.
Exchange MVP.
Avatar of ajruiz
ajruiz

ASKER

The users that are disabled do NOT have their SELF setting configured and they are showing up in the GAL.

If I disable the NT account do they automatically disappear from the GAL (assuming they do not have the SELF setting configured).

If the account is unable to receive email then it should disappear from the GAL.

However as a matter of course I always enable the option to hide the users from the GAL as part of the disabling process. At a couple of my clients they are particularly picky over ex-staff showing and it is the quickest way to guarantee that they have disappeared.

Simon.
Avatar of ajruiz

ASKER

That is what I thought.  In the past, I remember disabling accounts and their e-mail would disappear from the GAL but not anymore.

I am looking into possible replication issues between our domain controllers but I don’t think that is it.
ASKER CERTIFIED SOLUTION
Avatar of Vahik
Vahik

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of ajruiz

ASKER

Since this appears to be the case, I created a script that will disable the account, hide from the address book, remove distribution lists and move it to an Terminated Users OU.

Thanks,
We are currently experiencing the same problem any possibility of seeing what the script looks like.  I wuld really appreciate your help.
Avatar of ajruiz

ASKER

We use an Access front-end for creating/disabling accounts and granting access to individual and group mailboxes.

Attached is the VBA code for disabling accounts.  Hopefully you can make sense of it.
script.txt
Even after ticked "hide from exchange address Lists" users are still appearing in GAL - it would be good to konow why its happening.
Avatar of ajruiz

ASKER

When you tick the hide from exchange address list, it will be removed from the online GAL.  Your offline GAL will take up to two hours depending on your settings.  Even after the offline is updated, your Outlook Address Book will need to be updated (Tools, Synchronize, Download Address Book or you will need to close Outlook then open it back up.