Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Disabled Account Sending Email

Posted on 2007-11-30
11
Medium Priority
?
2,225 Views
Last Modified: 2010-04-21
I have a windows domain with active directory and an exchange 2003 server. One of the users left the company, so I disabled his account and changed his password. I keep the account in case someone needs to retrieve an email. Anyhow, the other day I happened to notice that there was an email waiting in the exchange queue to be delivered, and it was sent from this guy's account. I used the message tracking center in the exchange system manager, and through out the day his account is sending mail. I, of course, am worried about this. I have his computer and wiped and reloaded the hard drive for the next person that will take his place. I am trying to figure out where these emails are being sent from. Is there a good way to try and track something like this?
0
Comment
Question by:JeffBeall
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +3
11 Comments
 
LVL 6

Accepted Solution

by:
mmcodefive earned 500 total points
ID: 20383870
If you disabled that account no one should be able to get into it. Does someone have send on behalf rights to that account? It would show up in the manager as being sent from that account while someone is sending form an active account.
0
 
LVL 104

Assisted Solution

by:Sembee
Sembee earned 500 total points
ID: 20383879
Did you check for any rules on the account that could be forwarding email out?

Simon.
0
 
LVL 13

Expert Comment

by:rhinoceros
ID: 20383907
Granted "Send on behalf" permission of left staff account to somebody ?
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 6

Expert Comment

by:mmcodefive
ID: 20383947
rhinoceros read my comment ;-)
0
 
LVL 13

Expert Comment

by:rhinoceros
ID: 20384023
I think it is timing problem

No answer in there when I am posting  :)
0
 
LVL 2

Assisted Solution

by:geniph
geniph earned 500 total points
ID: 20384234
One thing I do when I disable an account is to also change the user's email address; I add disabled- to the start of it.  That does two things: it prevents that mailbox from continuing to receive emails, and it also makes it very quick to identify them to prevent this kind of thing.
0
 
LVL 1

Author Comment

by:JeffBeall
ID: 20384421
i like the "change the user's email address" idea. I am curious about how to find the "Send on behalf" thing. is that buried somewhere in the active directory users and groups?
0
 
LVL 6

Expert Comment

by:mmcodefive
ID: 20386166
It is a permission you can grant to a user. Re enable that user and look at the security tab there your going to have send as permission. There is also send on behalf permission in AD. Click on the Exchange Genral tab then Delivery Options, you will have send of behalf on top.
0
 
LVL 19

Assisted Solution

by:SteveH_UK
SteveH_UK earned 500 total points
ID: 20387476
This can also happen if the user put an out-of-office notification on.  They may still be receiving junk e-mail unless you changed the e-mail address, and then the junk mail results in an out-of-office response.

Best advice, when you close an account, change the e-mail address.  One good choice is to add .local or .internal to the end of the domain, e.g. "user@domain.com" changes to "user@domain.com.local".  You can also change the send and receive limits on the mailbox using AD Users & Computers.
0
 
LVL 1

Author Closing Comment

by:JeffBeall
ID: 31411974
Thanks for the help. The account is no longer sending emails. I like the other suggestions. It gave me ideas on how to better handle disabled accounts.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
If something goes wrong with Exchange, your IT resources are in trouble.All Exchange server migration processes are not designed to be identical and though migrating email from on-premises Exchange mailbox to Cloud’s Office 365 is relatively simple…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
Suggested Courses

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question