Solved

Using Group Memebrship to set Mailbox Features

Posted on 2010-09-22
12
327 Views
Last Modified: 2012-08-14
We have a potential situation where we would need to essentially deactivate a group of mailboxes quickly.  Not remove them, but temporarily render them un-useable.  THe thought is to turn off MAPI, POP3, Active Sync, OWA...etc from the Mailbox Features page.

Is there any way to set up a group and have it ready to go such that all we have to do is add people to the group to get the desired effect?

Thanks
0
Comment
Question by:ctp93
  • 5
  • 3
  • 3
  • +1
12 Comments
 
LVL 12

Expert Comment

by:FDiskWizard
ID: 33738325
Without disabling the user account? Or are these shared mailboxes?
The problem is if they are already connected with Outlook...

You could change the Storage limits on the account so that it is set to Prohibit SEND/RCV at 1KB :)
But be aware that may take a little time to propagate normally.


0
 
LVL 3

Expert Comment

by:wafischer
ID: 33738468
if you know anything about power shell then you can write your own script which would query the Group you created, create a list of users, then parse through those and disable their mailboxesusing the Exchange command console.  

By default when disabled they are kept for 30 days.  You can change this value though.  Then when ready just reconnect the mailboxes through exchange managment console.
0
 
LVL 32

Expert Comment

by:endital1097
ID: 33738523
you could put them in a group or ou
get-mailbox -organizationalunit <name> | set-casmailbox -popenabled:$false
get-distributiongroupmember <name> | foreach-object { set-casmailbox $_.Name -popenabled:$false }
0
 
LVL 3

Expert Comment

by:wafischer
ID: 33738614
Nice Endital1097.  How about:
get-mailbox -organizationalunit <name> | foreach-object { Disable-mailbox $_.Name}

Not sure of the syntax here, but wouldnt' that get every person within the OU then disable their mailbox where $_.Name is the variable?
0
 
LVL 32

Expert Comment

by:endital1097
ID: 33738865
Yours would delete the mailbox
I thought we just wanted to disable features
You also don't need the foreach
0
 
LVL 32

Expert Comment

by:endital1097
ID: 33738878
You would want to add to mine -imapenabled:$false etc
0
Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

 

Author Comment

by:ctp93
ID: 33738953
Endital1097,

If we want to go the Group route, we'd use:
get-mailbox -organizationalunit <name> | foreach-object { Disable-mailbox $_.Name}

Correct?  And we'd have to add them to the group prior to running the command right?
0
 

Author Comment

by:ctp93
ID: 33738970
Wait...that was backwards.  We'd use:

get-distributiongroupmember <name> | foreach-object { set-casmailbox $_.Name -popenabled:$false }

And then do the same for imap, owa, activesynce...etc
0
 
LVL 32

Expert Comment

by:endital1097
ID: 33738996
Yes run the following to see features to disable
Get-casmailbox you|  fl
0
 
LVL 3

Expert Comment

by:wafischer
ID: 33746112
How'd that work out for ya ctp93?
0
 
LVL 32

Accepted Solution

by:
endital1097 earned 500 total points
ID: 33746270
i tested this and you don't need the foreach

get-distributiongroupmember <group> | set-casmailbox -popenabled:$false -imapenabled:$false -owaenabled:$false -mapienabled:$false
0
 

Author Comment

by:ctp93
ID: 33755343
Thanks Endital1097.  Looks like this will work for our project
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

Resolve DNS query failed errors for Exchange
This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now