• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2229
  • Last Modified:

Disabled Account Sending Email

I have a windows domain with active directory and an exchange 2003 server. One of the users left the company, so I disabled his account and changed his password. I keep the account in case someone needs to retrieve an email. Anyhow, the other day I happened to notice that there was an email waiting in the exchange queue to be delivered, and it was sent from this guy's account. I used the message tracking center in the exchange system manager, and through out the day his account is sending mail. I, of course, am worried about this. I have his computer and wiped and reloaded the hard drive for the next person that will take his place. I am trying to figure out where these emails are being sent from. Is there a good way to try and track something like this?
0
JeffBeall
Asked:
JeffBeall
  • 3
  • 2
  • 2
  • +3
4 Solutions
 
mmcodefiveCommented:
If you disabled that account no one should be able to get into it. Does someone have send on behalf rights to that account? It would show up in the manager as being sent from that account while someone is sending form an active account.
0
 
SembeeCommented:
Did you check for any rules on the account that could be forwarding email out?

Simon.
0
 
rhinocerosCommented:
Granted "Send on behalf" permission of left staff account to somebody ?
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
mmcodefiveCommented:
rhinoceros read my comment ;-)
0
 
rhinocerosCommented:
I think it is timing problem

No answer in there when I am posting  :)
0
 
geniphCommented:
One thing I do when I disable an account is to also change the user's email address; I add disabled- to the start of it.  That does two things: it prevents that mailbox from continuing to receive emails, and it also makes it very quick to identify them to prevent this kind of thing.
0
 
JeffBeallAuthor Commented:
i like the "change the user's email address" idea. I am curious about how to find the "Send on behalf" thing. is that buried somewhere in the active directory users and groups?
0
 
mmcodefiveCommented:
It is a permission you can grant to a user. Re enable that user and look at the security tab there your going to have send as permission. There is also send on behalf permission in AD. Click on the Exchange Genral tab then Delivery Options, you will have send of behalf on top.
0
 
SteveH_UKCommented:
This can also happen if the user put an out-of-office notification on.  They may still be receiving junk e-mail unless you changed the e-mail address, and then the junk mail results in an out-of-office response.

Best advice, when you close an account, change the e-mail address.  One good choice is to add .local or .internal to the end of the domain, e.g. "user@domain.com" changes to "user@domain.com.local".  You can also change the send and receive limits on the mailbox using AD Users & Computers.
0
 
JeffBeallAuthor Commented:
Thanks for the help. The account is no longer sending emails. I like the other suggestions. It gave me ideas on how to better handle disabled accounts.
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 3
  • 2
  • 2
  • +3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now