-
Title
How to bulk remove access permission of the disabled user's archived mailbox ? -
Description
There may be situation to remove all permissions to the Archived mailboxes of users who left the organisation in which their user accounts are disabled, and no one can continue to access the disabled user's archived emails. -
Resolution
Disclaimers:The information in the script(s) provided is known to work successfully; however, they have not been officially tested by Quest Software Quality Control. If any of these instructions are changed and/or incorrectly used, intentionally or unintentionally, this solution becomes unsupported by Quest Software Support and Development. Quest Software Support and Development recommend always making a backup of the current database prior to execution of any script(s) that may modify it.For customization of the Product , please contact our Professional Services Organization.
1] Run the following SQL query in SQL Management Studio on the SQL server for Archive Manager to query all the disabled users and show related mailbox which has permission to access
Select lm.* from Loginmailbox lmJoinmailbox m
on m.MailBoxID = lm.MailBoxID
Join login L
onL.LoginID = m.OwnerLoginID
where l.Active <> 1 and l.OrganisationalUnit = 'CN=Users,DC=xxxx,DC=xxxx,DC=com' , where xxx indicates the actual domain2] Run the following SQL query in SQL Management Studio on the SQL server for Archive Manager to delete access to disabled mailbox
DeleteloginMailbox
From Loginmailbox lm
Join mailbox m
on m.MailBoxID = lm.MailBoxID
Join login L
on L.LoginID = m.OwnerLoginID
where l.Active <> 1 and l.OrganisationalUnit = 'CN=Users,DC=xxx,DC=xxx,DC=com' , where xxx indicates the actual domain