Or better yet, send wipe command, delete user including all mailbox info and
your issue is solved.
John W. Cook
Systems Administrator
Partnership for Strong Families
________________________________
From: Martin Blackstone <mblackst...@gmail.com>
To: NT System Admin Issues <ntsysadmin@lyris.sunbelt-software.com>
Sent: Wed Feb 16 18:38:39 2011
Subject: RE: Disabled AD Accounts and BES
Go into BES.
Go the User.
Disable as BlackBerry
user<javascript:Tapestry.submit_form('requestForm',%20'goToDisableBlackBerryUserPageLink');>
From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Wednesday, February 16, 2011 2:09 PM
To: NT System Admin Issues
Subject: RE: Disabled AD Accounts and BES
Actually, because BESADMIN is the account using MAPI, not the end-user account,
I don’t think disabling MAPI is going to do a darn thing here.
Removing Exchange attributes is the way to go.
(Sorry, I didn’t think of that. I’m not a BES expert, I just play one on TV.)
Regards,
Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com
From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Wednesday, February 16, 2011 5:05 PM
To: NT System Admin Issues
Subject: RE: Disabled AD Accounts and BES
BES uses MAPI, yes. But if you want to prevent ActiveSync and OWA access, you
also need to turn those off.
Regards,
Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com
From: Jonathan Link [mailto:jonathan.l...@gmail.com]
Sent: Wednesday, February 16, 2011 5:01 PM
To: NT System Admin Issues
Subject: Re: Disabled AD Accounts and BES
Moving forward, I would make wiping the device for terminated users an SOP...
And consider doing it now.
On Wed, Feb 16, 2011 at 3:07 PM, Harry Singh
<hbo...@gmail.com<mailto:hbo...@gmail.com>> wrote:
Ahh. Thanks Michael.
I'll make sure the team updates their documentation to either remove Exchange
Attributes -- which I assume isn't too difficult to add back on in the event
the user returns -- or disable certain mailbox features. To confirm, in regard
to BES, if i disable the MAPI function, that should suffice right?
Harry.
On Wed, Feb 16, 2011 at 2:56 PM, Michael B. Smith
<mich...@smithcons.com<mailto:mich...@smithcons.com>> wrote:
Disabling a user doesn’t stop its mailbox from receiving or sending email. That
is a specific required use-case in cross-forest scenarios.
You need to disable their access via the mailbox features (MAPI and OWA and EAS
are the top-3) or remove Exchange attributes from the account.
Regards,
Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com<http://theessentialexchange.com/>
From: Harry Singh [mailto:hbo...@gmail.com<mailto:hbo...@gmail.com>]
Sent: Wednesday, February 16, 2011 2:50 PM
To: NT System Admin Issues
Subject: OT: Disabled AD Accounts and BES
All -
There is a suspicion that a recently terminated employe's credentials might
still be in use on the network. (Disclaimer: I don't handle user
termination/creation) Since the user had multiple computers, I thought it may
be possible that an outlook session and of course windows session remained
logged in while the account was disabled. But I confirmed that wasn't the case.
We confirmed that the user's BB was still in service on the BES console. It
turns out that the user may still have been accessing corporate e-mail from the
BB, my question then is: How is it possible that by disabling an AD account
(changed the p/w as well) can BES still operate normally ? What are your
procedures/steps for user terminations/exits?
Environment:AD 2003 R2 / Exchange 2K10 / BES 5.0
Thanks,
Harry.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe ntsysadmin
________________________________
CONFIDENTIALITY STATEMENT: The information transmitted, or contained or
attached to or with this Notice is intended only for the person or entity to
which it is addressed and may contain Protected Health Information (PHI),
confidential and/or privileged material. Any review, transmission,
dissemination, or other use of, and taking any action in reliance upon this
information by persons or entities other than the intended recipient without
the express written consent of the sender are prohibited. This information may
be protected by the Health Insurance Portability and Accountability Act of 1996
(HIPAA), and other Federal and Florida laws. Improper or unauthorized use or
disclosure of this information could result in civil and/or criminal penalties.
Consider the environment. Please don't print this e-mail unless you really need
to.
This email and any attached files are confidential and intended solely for the
intended recipient(s). If you are not the named recipient you should not read,
distribute, copy or alter this email. Any views or opinions expressed in this
email are those of the author and do not represent those of the company.
Warning: Although precautions have been taken to make sure no viruses are
present in this email, the company cannot accept responsibility for any loss or
damage that arise from the use of this email or attachments.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
