We fired an employee and our systems disabled his account. However the Exchange 2007 still answering e-mails with out of office replies. How can we make Exchange 2007 check if accounts are disabled in AD?

You mean you disabled it in AD? In that case, the mailbox is still active and will continue to receive mail and fire off those OOFs. To truly disable the mailbox, you need to disable it via the Exchange tools which will disconnect the mailbox from the AD account.

You can also try below from EMC Disable-Mailbox "email address of user" How to Disable a Mailbox http://technet.microsoft.com/en-us/library/bb123730.aspx Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|

Would the mailbox cleanup agent eventually take care of this as well? I ask because our Security dept. sometime just deletes or disabledthe account in ADUC without touching the EMC. We told them it shouldn't be a problem and that the orphaned mailbox would be cleaned up when the cleanup agent runs.

Would the mailbox cleanup agent eventually take care of this as well? I ask because our Security dept. sometime just deletes or disabledthe account in ADUC without touching the EMC. We told them it shouldn't be a problem and that the orphaned mailbox would be cleaned up when the cleanup agent runs. Yes, Its part of the nightly online maint: http://technet.microsoft.com/en-us/library/bb123760.aspxOr manually run clean-mailboxdatabase:http://technet.microsoft.com/en-us/library/bb124076.aspx

Why is this change? Why do microsoft enforce us to reprogram our HR systems? Why aint Active Directory an authoritative resource anymore? How can we disable an account without having a special powershell-script ran?

Yes, this was a common complaint in the early days of 2007. Some things have been discontinued and de-emphasized: http://technet.microsoft.com/en-us/library/aa998911.aspxI can only suggest you disablemailboxes with the Exchange 2007 tools ( Powershell or EMC) rather than ADUC to be effective.

Hello, You can use Exchange management console, in Recipient configuration, disable his mailbox. If you don't like running a powershell command. As another option, since you have fired that person, you could also delete his ad account directly, the users mailbox will be removed. The behavior you described is by design. Sometimes, we need share one mailbox, we want the users ad account disabled and we still need to visit his mailbox. Even in Exchange 2003, the disabled ad user can send OOF message. In Exchange 2003, you can manage all user's Exchange task in ADUC, but in Exchange 2007, we need to go to EMC | recipient configuration. Thanks, Elvis

can somebody please provide me with at full setup/script that disables a users account in Exchange 2007? it must be stand-alone so it can be run from a standard 2003 with powershell installed (no exchange installed on the computer)

You'll need to at least install the Exchange Mgmt Tools:http://technet.microsoft.com/en-us/library/bb232090.aspxthen use the disable-mailbox command : http://technet.microsoft.com/en-us/library/aa997210.aspx

nice. can you please tell me how i can run this as a script and what commands to run so i can actually run it as a script.

At its most basic level you would need to just pass the command. Something like this:"C:\WINNT\system32\windowspowershell\v1.0\Powershell.exe" -psconsolefile "C:\Program Files\Microsoft\Exchange Server\Bin\exshell.psc1" -command "disable-mailbox -identity <alias>"Here are some links:http://exchangeshare.wordpress.com/2008/12/08/how-to-schedule-powershell-script-for-an-exchange-task/http://blogs.msdn.com/adamfazio/archive/2007/10/25/exchange-2007-script-how-to-run-as-a-scheduled-task.aspxhttp://www.exchangeninjas.com/PowerShellFAQshttp://technet.microsoft.com/en-us/scriptcenter/dd742419.aspx

Thank you very much!