Can IDM disable an Exchange mailbox?

What is disabling in your case and which version are you using (Exchange and OneIM)?

Our goal is to put the mailbox in a disabled state in Exchange through IDM. We're using Exchange 2013 and IDM 7.0.

Hi Dan,

to completely disable the mailbox immediately you need to set the delete delay to 0 for the exchange mailbox table.

You will find more information in the documentation.

Disabling Mailboxes https://support.oneidentity.com/technical-documents/identity-manager/7.1.1/administration-guide-for-connecting-to-microsoft--exchange/15#TOPIC-657997

Deleting and Restoring Mailboxes - Topic Configuring Deferred Deletion https://support.oneidentity.com/technical-documents/identity-manager/7.1.1/administration-guide-for-connecting-to-microsoft--exchange/15#TOPIC-657998

 

 

Thanks Markus. This is very helpful and I will use this information and follow-up with our Exchange Admin. I'm curious about the setting option for Mailbox is disabled referenced in the first link you provided. Is this the same as the option Mailbox is locked? We do not have that specific option and are using 7.0? We only have Mailbox is locked and Do not display in address book. I believe these are the two options getting set on the users mailbox when we permanently disabled users in the person table. I was just wondering if this will eventually trigger disabling the user's mailbox in Exchange once it executes after the deferred operation reached expiration. Ours is set to 30 days, then the record turns red in the deferred operations log for mailboxes.

Hi Dan,

first of all, the deferred operation will trigger the disable-mailbox cmdlet when it is executed.

And secondly, you are right, the documentation is somewhat misleading as she points to a flag Mailbox is disabled which in fact is presented as Mailbox is locked in the UI. But the documentation explains correctly the use of the property EX0Mailbox.IsLocked which is the property behind the checkbox in the UI.

HtH