Remove former user mailboxes - methodoloy?


Recommended Posts

Hi all,

We have a fair few former employees mailboxes left on our exchange (Exchange 03), I am thinking now is a good time to do something about it.

I was just going to exmerge/fully backup their mailbox to pst, place that in their HR Folder and delete the mailbox from exchange. It appears to have worked on the test subject.

That enables the people with the correct permissions to open that pst file should a need arise in the future and as such allow me to get them off the exchange. Seems this will work but exchange can be an engimatic beast so any downsides or the best practise methods other people use I should know about?

Thanks in advance,

Osiris

Thats a fair point and I have no answer for you other than seems pointless to just leave it on the exchange. Some of the mailboxes are quite large due to their being no restrictions on sizes previously, and removing them and just having them in pst format seems the easiest way for the HR person/Boss to access those mailboxes if it should arise in the future.

Clearly I have no definitive argument for these actions, but from the lack of replies im guessing this undertaking will either be very silly or very straightforward.

I export the mailbox of an ex-employee to a PST file using exmerge utility and store in on a backup server / file server

I then delete the users mailbox. If however another staff member requires all new mail from the ex-employee's email account to be forwarded onto them, i then do another step where i re-create the mailbox. Then in AD Users and Computers, under Exchange General tab, i set the ex-employee's email to forward to the other staff member. (un-ticking the box that says deliver email to both mailboxes).

Obviously this is just the way I do it, and is not necessarily the best or easiest way.

Thanks for the replies all,

Cheers Ryath, thats one way I have seen it done. These employees have been gone for some time so forwarding shouldnt be an issue. Right or wrong its nice to see someone else doing it this way :)

Another reason to remove it would be during the implementation or within an information lifecycle management policy.

In our organisation our main mailbox stores are on a SAN which is replicated in real time to our DR site. When a user leaves, their mailbox is moved to a different mailbox store hosted on a standard file server which is backed up weekly. After six months the mailbox is then PSTed and backed up to tape for long-term off-site storage. In order to access the data at that point, forms need to be filled in for the retrieval.

This policy helps keeps our storage costs down, ensures that only our most important live data is on the most expensive systems, that data we'd need first in a DR scenario is given precedence when being replicated and that access to archives is properly controlled. It also means that maintenance on the Exchange server (offline defrags, etc) is quicker and easier - and therefore cheaper.

I've mentioned cost there a few times and may sound like a cheapskate, but money saved in one area can then be utilised to improve an infrastructure making it more reliable, efficient, secure and resilient - which is what every systems admin and IT manager should aim to do.

  • 2 weeks later...

In Exchange, client licenses are based on per-user not per-mailbox. And in Exchange 2000 and later, there is one-to-one relationship between user account & mailbox. But we can disconnect a Mailbox from a user account and keep it in a Mailbox Store. This can be usefull if you have limited licenses and you want to keep the mailboxes of ex-users. But you will require to reconnect the mailbox to a user account before using it again.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Microsoft finally admits its default Windows 11 25H2, 24H2 action broke key legacy component by Sayan Sen Microsoft last week released Windows 11 KB5094126 and KB5093998 as the latest Patch Tuesday updates. Following that the company also published the accompanying dynamic updates under KB5094149, KB5095971, and KB5094156. So far the company has acknowledged two known issues that have popped up after the release which include bugged-out Office apps as well as the Recycle Bin; though there could be more at play too. Speaking of bugs and issues, Microsoft seems to have finally acknowledged a problem that probably has been around for close to a year. That's because back in July of 2025 the company made a default change to the latest Windows 11 versions, wherein it switched to JScript9Legacy on Windows 11 24H2 and later releases. Hence following the release of version 25H2 in October 2025, JScript9Legacy also remained default-enabled. As a result there has been a compatibility issue ever since then. For those wondering, by switching to JScript9Legacy Microsoft intended to improve the security of modern Windows PCs by reducing vulnerabilities tied to legacy scripting like cross-site scripting (XSS), among others. XSS exploits can allow cyber-attackers to attach malicious code onto legitimate websites and use them to execute the code when a potential victim loads such a website. Hence the new JScript9Legacy engine enforced stricter execution policies and improved object handling, which should help mitigate such attacks. Microsoft today has published a new support article detailing the problem. Neowin spotted it while browsing. The company says that JScript global definitions and execution context may fail to persist across scripts, potentially breaking older dependent apps and web-based components that relied on this legacy behavior. In the article Microsoft has confirmed that the issue stems from its move away from the older jscript9.dll engine in favor of jscript9legacy.dll. As mentioned above, while the newer engine was designed to address vulnerabilities and strengthen security it also changes how JScript handles execution context. As a result functions and definitions loaded by one script could no longer remain available to subsequent scripts once execution ended. The company notes that some applications worked correctly on earlier Windows versions because the older JScript engine automatically retained global definitions and execution state between scripts. Under the newer model though that behavior is disabled by default causing certain legacy workloads and polyfill-dependent scripts to fail. Microsoft says it addressed the problem via the KB5077241 update though the fix had not been enabled automatically in the following updates. As such admins must explicitly turn on persistent JScript execution context using a Registry setting that the tech giant shared today. The configuration can be applied to individual processes or system-wide through the FEATURE_ENABLE_PERSISTENCE registry key. The steps have been outlined below: Run the following command to create the feature control registry key: reg add "HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_PERSISTENCE" Under this key, create a new DWORD (32-bit) value. Configure the value as follows: To enable persistence for specific processes only: Set the value to 1 for each target process name. To enable persistence for all processes: Add * as the key name and set its value to 1. You can find the official support article here on Microsoft's website.
    • The possibility that milk gathers back into a glass implies that gravity can be 'reversed'.
    • VidCoder 12.20 by Razvan Serea  VidCoder is a DVD/Blu-ray ripping and video transcoding application for Windows. It uses HandBrake as its encoding engine. Calling directly into the HandBrake library gives it a more rich UI than the official HandBrake Windows GUI. VidCoder can rip DVDs but does not defeat the CSS encryption found in most commercial DVDs. You’ll need the NET 8 Desktop Runtime. If you don’t have it, VidCoder will prompt you to download and install it. The Portable version is self-contained and does not require any .NET Runtime to be installed. You do not need to install HandBrake for VidCoder to work. Feature list: Multi-threaded MP4, MKV containers Completely integrated encoding pipeline: everything is in one process and no huge intermediate temporary files H.264, H.265, MPEG-4, MPEG-2, VP8, Theora video Hardware-accelerated encoding with AMD VCE, Nvidia NVENC and Intel QuickSync AAC, MP3, Vorbis, AC3, FLAC audio encoding and AAC/AC3/MP3/DTS/DTS-HD passthrough Target bitrate, size or quality for video 2-pass encoding Decomb, detelecine, deinterlace, rotate, reflect, chroma smooth, colorspace filters Powerful batch encoding with simultaneous encodes Customizable Pickers to automatically pick audio and subtitle tracks, destination, titles and more Instant source previews Creates small encoded preview clips Pause, resume encoding VidCoder 12.20 changes: Updated HandBrake core to 1.11.2. Download: VidCoder 12.20 | 47.0 MB (Open Source) Download: Portable VidCoder 12.19 | 89.3 MB Link: VidCoder Home Page | Github | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
  • Recent Achievements

    • Week One Done
      Jordan Smith earned a badge
      Week One Done
    • Reacting Well
      BizSAR earned a badge
      Reacting Well
    • First Post
      AndreaB earned a badge
      First Post
    • Week One Done
      Huge Trailer earned a badge
      Week One Done
    • Week One Done
      Classifyskilleducation earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      590
    2. 2
      +Edouard
      185
    3. 3
      PsYcHoKiLLa
      76
    4. 4
      Michael Scrip
      73
    5. 5
      Steven P.
      66
  • Tell a friend

    Love Neowin? Tell a friend!