Link to home
Start Free TrialLog in
Avatar of baleman2
baleman2

asked on

Change Exchange 2007 Password for non-domain Users

Our domain has both a domain controller and an Exchange Server.  So that laptop PC's can be used by many different end users in our different departments, a "generic" profile for a laptop is created on the domain controller.  That is, a profile named "servtech10" will be created with it's own password.  In this way any number of users can logon to the domain using this generic username as long as they know the password.

However, I must personalize the Outlook account for 1 end user on this laptop.  Our naming convention is [first letter of first name][entire last name]@[domainname.com].  So, I create this mailbox manually on the Exchange Server. . . and all works well.  Because the end user who has the "personalized" mailbox for Outlook uses the "generic" logon credentials to join the domain, I provide a different password for the Outlook mailbox access.  This prevents other end users who may use the laptop from being able to see email.

Our domain users must change their passwords every 90 days - company policy.  After the password for the "generic" laptop is changed, the "personalized" Outlook account begins to prompt for a password when an attempt is made to open and retrieve email.  Neither the old password for the "generic" laptop nor the new password will allow Outlook to open.

I know of no way to change the password for ONLY the "personalized" mailbox on the Exchange Server.  Right now, the only workaround I have is to recreate a profile on the domain controller for the "personalized" account; then,  in effect creating two accounts for one laptop end user - which doubles licensing requirements.  

Is there not a way to just change the password for an mailbox that is manually created on the Exchange Server?
ASKER CERTIFIED SOLUTION
Avatar of Forror
Forror
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of baleman2
baleman2

ASKER

User A ("servtech10" - who does have a domain account) represents 10 different people who can take that laptop and login because they know the password for the DOMAIN account.  User B  has no DOMAIN account but can login using the laptop because he knows User A credentials.  

Because User B has no DOMAIN account but needed a mailbox, I manually created a mailbox (userb@domain.com) on the Exchange Server with a different password so that User A could not access email delivered only for the eyes of User B.

For this particular department of our company, we don't want to create individual domain accounts for all end users - mainly because of high turnover in personnel.  Hence, the "generic" account which allows any number of end users to logon.  But, the department head must have a mailbox on that laptop in order to receive important company email.  

This process works until the "generic" account receives the prompt to change the Windows Logon password (every 90 days). Once that password is changed,  the laptop can still join the domain with the new password.  But, User A's mailbox can no longer be opened with either the old or new password.