IgNiTeD SoUL

Problem

You want to mail-disable a user.

Solution

Using a graphical user interface

1. Open the Active Directory Users and Computers (ADUC) snap-in.
2. If you need to change domains, right-click on Active Directory Users and Computers in the left pane, select Connect to Domain, enter the domain name, and click OK.
3. In the left pane, browse to the parent container of the user, right-click on the user, and select Exchange Tasks.
4. On the Welcome screen, click Next.
5. Select Remove Exchange Attributes and click Next.
6. Read the warning and click Next.
7. On the Completion screen, click Finish.

Using a command-line interface

> exchmbx -b “<User DN>” -clear

Replace <User DN> with the user’s distinguished name.

For an alternative Microsoft-native tool method, create an LDIF file called clearmailattribs.ldf with the following contents:

dn: <UserDN>

changetype: modify

replace: altRecipient

altRecipient:

–

replace: authOrig

authOrig:

–

…

<SEE DISCUSSION, NOT A COMPLETE LDIF FILE>

…

Replace <UserDN> with the user’s distinguished name. Note that this is not a complete LDIF file as there are many attributes that must be cleared; see the “Discussion” section for further details. Once you’ve created the LDIF file, run the following command:

> ldifde -i -f clearmailattribs.ldf