Disabled AD account and user still able to send emails after 1 hour
Posted on 2014-04-17
I have a client that recently disable an account in AD at 11:00 AM EST today for one exiting employee, however the employee was able to send an email around noon, I mean after one hour his account was disabled in AD
Please correct me if I'm wrong, but when an AD account is disabled, the mailbox is automatically disabled and moved to an exchange container called Disconnected mailboxes that you can see on Exchange management console[Exchange 2010]
What could be happen that an user is still able to send emails after one hour even if the AD account is disable?
I know by default the replication in AD takes 15 minutes and you can force the replication among all DCs, so, we do have a child tree domain with 3 domains. Our exchange servers are 2010 SP3 and forest/domain level is Windows 2008 R2
How long will take to replicate all changes in AD and Exchange once an account is disabled?
Is there a manual task required to be performed in Exchange once a AD account is disabled?
Is there a power shell cmdlet that we can use to identify when an AD account was disabled and display all properties for that user? same for exchange,