MFAFC
asked on
Mailbox/AD Removal
Hello,
In an Exchange 2007 environment, right clicking "remove" on a mailbox deletes the mailbox and the AD object. Does anybody know how long that process takes for the AD object to remove? I ask, because I removed some mailboxes over a week ago and the AD objects are still present. My deleted mailbox retention policy is only 3 days.
Hope somebody can offer some advice.
Thanks
In an Exchange 2007 environment, right clicking "remove" on a mailbox deletes the mailbox and the AD object. Does anybody know how long that process takes for the AD object to remove? I ask, because I removed some mailboxes over a week ago and the AD objects are still present. My deleted mailbox retention policy is only 3 days.
Hope somebody can offer some advice.
Thanks
Last Comment
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Do you have exchange 2013 as well?
ASKER
No, unfortunately, we are STILL on 2007 (I know it's ancient).
Can you do same process on test mailbox and confirm the behavior pl
ASKER
Sure - I will come back to you.
ASKER
Hi Mahesh,
So this morning I have removed the test mailbox I created yesterday. It prompted me with the message, "Removing the mailbox will remove the windows use object and mark the mailbox in the database for removal". I obviously press yes.
I can see in EMC that the mailbox is now sitting in the disconnected mailbox area.
The windows object has been removed from AD!
The only thing I can think of here is that the AD objects that haven't auto deleted as per the above are all in the Disabled User Accounts OU in AD.
Would that make a difference?
Thanks
So this morning I have removed the test mailbox I created yesterday. It prompted me with the message, "Removing the mailbox will remove the windows use object and mark the mailbox in the database for removal". I obviously press yes.
I can see in EMC that the mailbox is now sitting in the disconnected mailbox area.
The windows object has been removed from AD!
The only thing I can think of here is that the AD objects that haven't auto deleted as per the above are all in the Disabled User Accounts OU in AD.
Would that make a difference?
Thanks
Disabled accounts should not make any difference
You can try that one as well,
check the ou where previous accounts are stored if you have removed delete permissions from OU properties for account used to delete mailboxes
OR
The previous mailboxes you deleted may have user account properties "Protect from accidental deletion" checkbox enabled
U can create one test account, create mailbox and on account properties under Object tab enabled above check box and then check if you are able to delete account along with mailbox.
You can try that one as well,
check the ou where previous accounts are stored if you have removed delete permissions from OU properties for account used to delete mailboxes
OR
The previous mailboxes you deleted may have user account properties "Protect from accidental deletion" checkbox enabled
U can create one test account, create mailbox and on account properties under Object tab enabled above check box and then check if you are able to delete account along with mailbox.
ASKER
Thanks Mahesh.
Delete permissions for Domain Admins are present - the account I used in the EMC to delete mailboxes is a domain admin.
The accounts sat in the disabled user accounts OU do not have the accidental protection box ticked so they should be able to be removed.
It clearly works as the test you asked me to do worked. There just seems to be an issue with these 40+ accounts that haven't purged. I suppose I could remove them manually from AD and then closely monitor this in the future.
I will mark your answer as the solution as you answered my initial question too.
Thanks for all your help.
Delete permissions for Domain Admins are present - the account I used in the EMC to delete mailboxes is a domain admin.
The accounts sat in the disabled user accounts OU do not have the accidental protection box ticked so they should be able to be removed.
It clearly works as the test you asked me to do worked. There just seems to be an issue with these 40+ accounts that haven't purged. I suppose I could remove them manually from AD and then closely monitor this in the future.
I will mark your answer as the solution as you answered my initial question too.
Thanks for all your help.
Exchange
Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.
213K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
ASKER
Thanks for the reply. We have 3 DC's - all objects are present across the 3 DC's. Replication is fine - we have 3 sites and 7 DC's in total. I know replication is fine.
The mailboxes are not just disabled. I know because I did it. I removed them - it even gives you the prompt to advise that it will mark the AD object for removal.
What's happening is that the mailboxes go to the disconnected mailboxes folder and then after 3 days, they are auto removed. The AD objects still remain...