emails access after account is disabled in exchange 2007 using mobile devices

Im working with exchange 2007 and the users access their mailboxes using mobile devices only using activesync. If i disable a user account in exchange obviously the user can't send|receive anymore but still has access to the old email.  i would like to have a setup when  once an account is disabled there is no access to any email, Is there a way? I tries imap but it does saves emails on the phone.. I do know about the device wipe future in exchange but it is too drastic as the phone belong to users and the company plus if the user restores the phone from a backup, the email will restore as well.
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

yo_beeDirector of Information TechnologyCommented:
You need to look into MDM (Mobile Device Management) solution that has containerize option. This can be also referred to EMM (Enterprise Mobile Management) or Workspace.

What this allows you to do is keep work stuff separate from personal stuff. It also prevents user from easily copy or save data in Dropbox, Google Drive and others like that. MDM Solutions will push a payload setup to a device and will allow you to remove the payload, but it is not the most secure. I would look closer at EMM/Workspace options.

I have been doing some POC's with various venders.

GO! Enterprise
MASEE Solution Guide - Technical Dept HeadCommented:
You can clear the mailbox before disabling the mailbox. Next time user opens it will get deleted from outlook/mobile
Search-Mailbox -Identity mailbox1 -DeleteContent -LogLevel Full 

Open in new window

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
yo_beeDirector of Information TechnologyCommented:
That is an interesting angle.
Can you archive the mail rather then delete it completely?
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Thomas WheelerCommented:
You don't want to delete the messages you want to use mobile management to initiate a remote wipe. We use this also when a device is lost or stolen. This will wipe the data from the mobile device and disable access but retains the mailbox content.
yo_beeDirector of Information TechnologyCommented:

That is not the question at hand that the Asker is asking.
This is not about lost or stolen, but rather a user leaves a company and there is no formal exit.  They want to stop and remove all instance of the email and contacts, not wipe their phone.
Thomas WheelerCommented:
@yo_bee that is right you can use mobile management to achieve this. You are not wiping the phone you can remove email contacts and disable sync.
vizoitaAuthor Commented:
Amazing answer.. So simple and  fits perfect for what i need. Thank you very much.
yo_beeDirector of Information TechnologyCommented:

You do not have any concerns about retention or compliance?
vizoitaAuthor Commented:

Im not sure what do you mean by retention and compliance. please explain.
yo_beeDirector of Information TechnologyCommented:
The script that you accepted as a solution removes all e-mails so if you have to go back for search for an e-mail you will not have it.  I would look at using the solution, but rather then delete the items Archive them in a PST just in case you need to search the content.  Then after some time you can delete the PST.
vizoitaAuthor Commented:
 i accepted MAS's solution as an overall idea. I would defiantly dump mailbox content into a pst prior of wiping.
Thanks  everyone for the help.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Email Clients

From novice to tech pro — start learning today.