Exchange Administrator Notes
-
- Adding Mailbox to Outlook
- Annual Mailbox Clean-up
Blocking a compromised Exchange User (from sending spam via OWA
or with other clients)
Calendar
Administration
Creating
Equipment Mailbox
-
Changing Exchange ID
- Sometimes a person will want to change their primary email
address to another. This can be done fairly easily but takes a few
steps and timing of the steps needs to be taken into consideration.
-
Email Forwarding or Calendar-Only
Users
- This set-up works for both people who want all their email
redirected to a non-Exchange account or for people who only want to
use Exchange for Calendar access.
- Enabling SIP Instant Messaging
-
Giving Mailbox Permissions
Outlook Command Line Switches
Preventing Winmail.Dat
Reconnecting disconnected Mailbox
-
Replacing Mailbox
- This would be done in the case where creating a new Mail Profile
is not enough to solve the problem the user is experiencing;
all efforts to find a fix have failed; and a successful test was
done by letting the user use a new "test" mailbox.
- Retrieving Attachments from
Exchange Servers
-
Mailbox Quota Management
- Exchange 2007
-
Mailing List Management
-
Disabled Mailboxes Receive Email
- Disabled AD account can still receive the mail since some version of Exchange 2003. On Exchange 2007, unless you have disable the mailbox or remove the mailbox, you will also receive the mail.
I found this is the case with Exchange 2007 since it was introduced.
I don't remember seeing this on Exchange 2003. Seems like account services need to do extra work
to make sure everybody get a bounce back message as soon as AD account is disabled. Otherwise, user will think that this mailbox still exists and expect a reply. The best option to me is to have Account-Services do an extra step but without us (mail-admin) getting involved in the setup; and prevent the disabled account mailbox from receiving new mail and having an NDR whose msg is more or less understandable to the sender (end-user).
This can be accomplished by adding the disabled user "itself" in the Delivery Restrictions Tab of the account plus placing a check mark in "Requires that all senders are Authenticated". This results in no one being able to send mail to the disabled account and prevents email spoofing.
Also, the resulting NDR is:
"Your message wasn't delivered because of security policies. Microsoft Exchange will not try to redeliver this message for you. Please provide the following diagnostic text to your system administrator".
#550 5.7.1 RESOLVER.RST.NotAuthorized; not authorized ##
============================================================
The key words of "security policies, not authorized" makes more sense than other approaches suggested by the article such as setting 0 limits to message size or mailbox sizes, in which case the NDRs will be "This message exceeds the maximum message size allowed" or "mailbox full condition".
Likely, any of these NDRs will raise Qs and follow-up attempts from the senders, but at least the first one is the most applicable to the condition in my opinion.
|