Disable email but still have access to AD account

[dsk]

Hello all,

 

My google is weak, but we have a scenario here where we would like to stop staff from having access to their email account, but still be able to log into their machines.

 

Is there anyway of doing this? We dont want end users accessing emails at all, so we've disconnected the exchange server from the network.

 

thanks in advance!

 

Should add the specs:

 

Exchange 2007 with latest updates on Server 2008.

Clients using a mixture of Outlook 2010, phones and OWA

Edited October 18, 2013 by dsk
specs

[buzzard]

Yes just delete the users mailbox...

[dsk]

We dont want to delete anything, just prevent them from accessing it.

[3s-gtech]

How do they access their email? In Exchange 2013, you can disable access to OWA for individual users from the ECP.

[dsk]

Sorry, should have said at the start we're on exchange 2007 with latest updates and service packs on server 2008 with latest updates.

 

The scenario involves a malicious email being set out to a group of people, we dont want staff to see that email hence why im looking for options.

[bushby]

on each mailbox on the ECP

under in the propitiys for the mailbox there is a tab called mailbox features with this just disable the owa and mapi (outlook access) this will then prevent them from getting into their mailbox, you can if need be give full access to required personel and they can dive into the account and remove said emails

[dsk]

Yeah, thats the only thing i can think of, is there any way of doing it, obviously they will have a window of being able to access the email whilst we are doing that. This is going to be for about 100 users.

 

I was hoping there would be a way of doing in AD somewhere, but i cant see anything obvious.

[bushby]

temp disable the accounts whilst the work on the mailbox features is being done? would be the only thing i can say.

it can be done in bulk for the mailbox features but the mailbox access is per account setting.

[sukh]

do it via the exchange powershell...use a filter or csv file if you have the list of users. you say staff so maybe there is a unique attribute which describes them...

[clareq]

You should be able to use powershell to delete the e-mail in question - I'm not sure of the exact syntax, but I have done so in the past under similar circumstances - you use a unique phrase in the body of the e-mail and move it to a designated person's mailbox.

[AngryTechnician]

Configure Windows firewall on the Exchange server to only accept connections from the machine(s) that will be used to purge the offending email. Once done, revert firewall rules to normal.

[kevin_lane]

why do you need to disable access

[Ephelyon]

You can use PowerShell to get all mailbox users under e.g. one OU and disable the protocols as mentioned above in (something like) a single command. TechNet has a decent Exchange PowerShell resource or I'm sure a member could assist you with scripting it up if finding the time to research it is very difficult at the moment.

[kevin_lane]

will this help Search For and Delete Messages from Users' Mailboxes

[FN-GM]

We do it another way. We have a transport rule that will not allow them to email anybody apart form teachers. That way teaching and learning can continue and they can't email mates

[Ephelyon]

That's our sanction for first-degree abuse.