Disabling User Accounts

Posted on 2007-10-10
Last Modified: 2010-04-21

What are the steps required for disabling a user account?
We are running SBS 2003 and have a couple employees who have left. We would like to disable their email and active directory accounts.

Yesterday, I disabled the email and not the active directory accounts, and received the following error message in event viewer:

Event Type:      Warning
Event Source:      MSExchangeIS
Event Category:      General
Event ID:      9548
Date:            10/10/2007
Time:            10:30:42 AM
User:            N/A
Computer:      MyComputer
Disabled user /o=MyDomain/ou=first administrative group/cn=Recipients/cn=MyUser does not have a master account SID. Please use Active Directory MMC to set an active account as this user's master account.

For more information, click

Thanks! Kristin
Question by:forcedexposure
    LVL 6

    Accepted Solution

    All you have to do is disable their active directory user accounts. I have never disabled the mailbox itself if that is possible but it sounds like that the mailboxes are no longer associated with a user account with whatever action you took. The manner in which you disable accounts is based on how you wish to deal with these accounts later. If you are archiving mail you need to reenable the user account and reassociate the mailbox in order to access their mail. If you are going to rename te accounts for new employees then you disable the accounts and save them. If you are going to create new accounts then you can delete the accounts. Once you delete the account the mailbox will stay in exchange for 30 days I beleive by default before it is purged. So this leaves you with a few options on how you want to handle user accounts.

    Let me know if this helps.
    LVL 4

    Assisted Solution

    This error occurs when the user account associated with a mailbox is disabled or deleted.  It sounds like the accounts were disabled but the mailboxes were not deleted.  If you check the user accounts from ADUC and see the Exchange attributes then the mailboxes are still connected to the user object.  See for explanation of this event.

    If you want the mailboxes to remain active while the user accounts are disabled, you'll need to add "full mailbox access" and "associated external account" permissions to the SELF account.  See for a description of this.
    LVL 11

    Assisted Solution

    This is a excellent site which has the detailed info on what you need to do when a employee resigns

    Author Closing Comment

    apologies for the delayed response.
    thanks! Kristin

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Free book by J.Peter Bruzzese, Microsoft MVP

    Are you using Office 365? Trying to set up email signatures but you’re struggling with transport rules and connectors? Let renowned Microsoft MVP J.Peter Bruzzese show you how in this exclusive e-book on Office 365 email signatures. Better yet, it’s free!

    Email statistics and Mailbox database quotas You might have an interest in attaining information such as mailbox details, mailbox statistics and mailbox database details from Exchange server. At that point, knowing how to retrieve this information …
    You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
    In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
    In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…

    794 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now