How can an exchange account that is disbaled, send out a meeting request?
We have a user that was let go from the company so we disabled their AD and Exchange (exch 2013) account but for some reason today, they disabled account sent out a meeting request...
How could this be and how can we stop this from happening?
ExchangeOutlook
Last Comment
vmich
8/22/2022 - Mon
Murali Reddy
Mailbox disabled (disconnected) or just AD account disabled?
If just AD account is disabled I see two possibilities-
1- There shall be a delegate with SendAs or sendon behalf rights sending this invite intentionally or unintentionally.
2- An old meeting request where the organizer is the so called disabled user, is updated by respective user delegates.
or there is a also a possibility that a synced device (ActiveSync) involved here.
vmich
ASKER
The AD account was disabled which in turn should disable the exchange account correct?
Murali Reddy
That is a wrong perception. Disabled AD account will deny the user to interactively logging in to the mailbox. However the mailbox is still functional and can receive emails. Delegates can work on behalf of the mailbox (and hence the email address).
Well I just checked the account in exchange and it appears that it is saying it is disabled..
How can I be sure it is disabled in exchange which I think it is?
Murali Reddy
simple - You send a test mail, it will not shoot any NDR. Check your tracking log, the message is delivered to the mailbox.
Will Szymkowski
If the mailbox is DISABLED, then it will not appear in the EAC or Powershell. This mailbox will be in a Disconnected State if the mailbox is disabled. If it is only the AD Account that is disabled then mailbox is still active as Murali has already mentioned.
If you had calendar items that were stuck in the Outbox or delayed sending this could also be another reason why it was sent out.
If just AD account is disabled I see two possibilities-
1- There shall be a delegate with SendAs or sendon behalf rights sending this invite intentionally or unintentionally.
2- An old meeting request where the organizer is the so called disabled user, is updated by respective user delegates.
or there is a also a possibility that a synced device (ActiveSync) involved here.