Solved

mail Read receipt received from Disabled user

Posted on 2016-08-18
5
46 Views
Last Modified: 2016-09-06
Hi All,

  I disabled active directory for one user since 5 months, I sent an email to one user in my Exchange  and received read receipt from the disabled user, there was a mailbox forward from  this user to the disabled one, I need to know how that can happen, how can I receive the read receipt from a disabled Account.
0
Comment
Question by:ITMaster1979
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 41

Assisted Solution

by:Adam Brown
Adam Brown earned 250 total points (awarded by participants)
ID: 41761098
Disabling a user account in AD doesn't make their mailbox inaccessible. It just prevents that user from being able to log in to use the mailbox. Any user who has permission to open the mailbox for that user can still do so, read messages, and generate a read receipt. Run get-mailboxpermission on the disabled user's mailbox to see which people have access to that mailbox.
0
 
LVL 1

Author Comment

by:ITMaster1979
ID: 41761108
I did and only Exchange admin, any luck that the user is still accessing it?
0
 
LVL 16

Assisted Solution

by:FOX
FOX earned 250 total points (awarded by participants)
ID: 41761175
Disable all the mailbox features for this account  example
OWA,Activesync, Imap, etc.
also Mail Flow Settings> Mail Delivery restrictions....accept messages from only the following senders
0
 
LVL 41

Accepted Solution

by:
Adam Brown earned 250 total points (awarded by participants)
ID: 41761183
If the user's account is disabled, they can't get into the mailbox. You'll also want to check to see if the permissions set for the Exchange Admin have automapping enabled. You would basically log in to the exchange admin mailbox profile in outlook, and if it also loads the mailbox of the disabled user, then automapping is enabled. You have to remove the permissions and add them back with -automapping $false appended to the add-mailboxpermission string to fix that.

If the disabled user somehow got ahold of the Exchange admin creds, though, yeah, they can still access the mailbox. Run get-mailboxstatistics <disabled mailbox> | fl and look through that data to see the last time the mailbox was opened and how, if you like.

Realistically, though, if someone is set to forward messages to that mailbox or if the mailbox is configure to forward to someone else, it's possible the forward action triggered the read receipt you got.
0
 
LVL 41

Expert Comment

by:Adam Brown
ID: 41785793
No response from user. Answers should resolve or explain the issue.
0

Featured Post

Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article describes how to import an Outlook PST file to Office 365 using a third party product to avoid Microsoft's Azure command line tool, saving you time.
Check out this step-by-step guide for using the newly updated Experts Exchange mobile app—released on May 30.
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
Suggested Courses

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question