Check disabled status of multiple mailboxes (and then Delete them)

Ive just finished auditing our exchange server, and there are a whole load of old mailboxes from staff who no longer work here.

The user accounts are still in AD but they are all disabled. If I just delete the accounts, Im assuming this will delete the mailboxes as well?

Ive exported a list of all the mailboxes in the Exchange Server.. is there an automated way I can cross reference this with AD, and get a list of the mailboxes whose correspoding AD account is disabled?

Cheers

Quote:

---

Originally Posted by RabbieBurns

get a list of the mailboxes whose correspoding AD account is disabled?

---

No need to cross-reference as you can simply list disabled AD accounts that are mailbox-enabled...

Code:

---

Get-User -ResultSize Unlimited -RecipientTypeDetails UserMailbox | Where-Object { $_.UserAccountControl -match 'AccountDisabled' }

---

I just tried running that but it didnt return any results:

Code:

---

[PS] H:\>Get-User -ResultSize Unlimited -RecipientTypeDetails UserMailbox | Where-Object { $_.UserAccountControl -match 'AccountDisabled' }
[PS] H:\>

---

Works fine for me... :confused:

Code:

---

[PS] D:\>Get-User -ResultSize Unlimited -RecipientTypeDetails UserMailbox | Where-Object { $_.UserAccountControl -match 'AccountDisabled' }

Name                                                        RecipientType
----                                                        -------------
ABC                                                        UserMailbox
DEF                                                        UserMailbox

---

What happens if you run the command shown in red above? Does it list all of your users in AD who are mailbox-enabled?

1. If you just delete the accounts it wont just delete the mailboxes. What you should do is remove the user from the EMC which will delete the account and mailbox, or if you disable the the mailbox it will just mark the mailbox for deletion and leave the user account alone. Perform these actions via the EMC. Although you can do it via AD, it;s cleaner via EMC.
2.

Quote:

---

Originally Posted by Arthur

Works fine for me... :confused:

Code:

---

[PS] D:\>Get-User -ResultSize Unlimited -RecipientTypeDetails UserMailbox | Where-Object { $_.UserAccountControl -match 'AccountDisabled' }

Name                                                        RecipientType
----                                                        -------------
ABC                                                        UserMailbox
DEF                                                        UserMailbox

---

What happens if you run the command shown in red above? Does it list all of your users in AD who are mailbox-enabled?

---

red command works... full command doesnt...

@sukh, cheers for the advice of how best to delete... any suggestion on how to determine active / inactive (enabled/disabled Ad accounts) simply?

this is 2007 exch not 2010, im not sure if ive put 2010 in my posts by accident anwyere

Which AD version you on?

2008, but could raise to 2008r2 if needed as all our dc are now 2008r2

1. You can do something like this in AD - do a custom search -

(&(UserAccountControl:1.2.840.113556.1.4.803:=2)(m sExchHomeServerName=*)(objectClass=User))

2. Or simply just do a common queries, and select disabled account, then on the results, go to the view and add in the exch server columns

3. Or if you want to use powershell, quest have some simple and nice add-ins

Quote:

---

Originally Posted by RabbieBurns

this is 2007 exch not 2010, I'm not sure if I've put 2010 in my posts by accident anywhere

---

I'm using Exchange Server 2010 SP1. Perhaps that's why it works for me?

Quote:

---

Originally Posted by Arthur

I'm using Exchange Server 2010 SP1. Perhaps that's why it works for me?

---

If you do get-user "username" | fl

does the attribute UserAccountControl get returned in the results? If does then that why, diff exch veriosns

Quote:

---

Originally Posted by sukh

3. Or if you want to use powershell, quest have some simple and nice add-ins

---

Code:

---

Get-QADUser -Disabled

---

I know it's not quite the same, but another option might be to use the Get-Mailbox cmdlet to find mailboxes which haven't been accessed within the last 90 days.

Code:

---

$mailboxes = Get-Mailbox -ResultSize Unlimited
$mailboxes | Where-Object {
  (Get-MailboxStatistics $_).LastLogonTime -and `
  (Get-MailboxStatistics $_).LastLogonTime -le `
  (Get-Date).AddDays(-90)
}

---

Quote:

---

Originally Posted by sukh

does the attribute UserAccountControl get returned in the results?

---

Yes. :)

Quote:

---

Originally Posted by Arthur

Code:

---

Get-QADUser -Disabled

---

I know it's not quite the same, but another option might be to use the Get-Mailbox cmdlet to find mailboxes which haven't been accessed within the last 90 days.

Code:

---

$mailboxes = Get-Mailbox -ResultSize Unlimited
$mailboxes | Where-Object {
  (Get-MailboxStatistics $_).LastLogonTime -and `
  (Get-MailboxStatistics $_).LastLogonTime -le `
  (Get-Date).AddDays(-90)
}

---

---

Nice idea with the logon time but it seems we have current staff who havent used the mailbox in a long time :(

Where would I find the quest script?