11. Setting a Default Reply-To Address for a User Account
Each e-mail address type has one default reply address. This e-mail
address sets the value of the Reply To text box. To change the default
reply address, follow these steps:
-
In the Exchange Management Console, expand the Recipient Configuration node and then select the related Mailbox node.
-
Double-click the mailbox entry for the user with which you want to work.
-
Click the E-Mail Addresses tab. Current default e-mail addresses are
highlighted with bold text. E-mail addresses that aren't highlighted
are used only as alternative addresses for delivering messages to the
current mailbox.
-
To change the current default settings, select an e-mail address that isn't highlighted and then click Set As Reply.
12. Changing a User's Web, Wireless Service, and Protocol Options
When you create user accounts with mailboxes, global settings determine the Web, wireless
services, and protocols that are available. You can change these
settings for individual users at any time by completing the following
steps:
-
In the Exchange Management Console, expand the Recipient Configuration node and then select the related Mailbox node.
-
Double-click the mailbox entry for the user with which you want to work.
-
Click the Mailbox Features tab. As shown in Figure 11, configure the following Web, wireless services, and protocols for the user:
-
Outlook Web App Permits the user to access the mailbox with a Web browser. Properties allow you to specify an Outlook Web App mailbox policy.
-
Exchange ActiveSync Allows the user to synchronize the mailbox and to browse wireless devices. Properties allow you to specify an Exchange ActiveSync policy.
-
Unified Messaging
Allows the user to access unified messaging features, such as the voice
browser. To enable or disable unified messaging, right-click the
mailbox entry in the Exchange Management Console, click Enable Unified
Messaging or Disable Unified Messaging as appropriate, and then follow
the prompts.
-
MAPI
Permits the user to access the mailbox with a Messaging Application Programming Interface (MAPI) e-mail client
-
POP3 Permits the
user to access the mailbox with a Post Office Protocol version 3 (POP3)
e-mail client. Properties allow you to specify the MIME format of
messages that are retrieved from the server.
-
Internet Message Access Protocol version 4 (IMAP4)
Permits the user to access the mailbox with an IMAP4 e-mail client
Properties allow you to specify the MIME format of messages that are
retrieved from the server.
-
Archive
Indicates whether
an archive mailbox has been created for the user. Properties allow you
to specify the name of the archive mailbox. To enable or disable an
archive mailbox, right-click the mailbox entry in the Exchange
Management Console, click Enable Archive or Disable Archive as
appropriate, and then follow the prompts.
-
Select an option and then click Enable or Disable, as appropriate,
to change the status. If an option has configurable properties and you
want to change the properties, select the option and then click
Properties. Make your changes, and then click OK. Click OK again to
close the Properties dialog box.
13. Requiring User Accounts to Change Passwords
Group Policy settings typically require users to periodically change
their passwords. Sometimes, you might have to ensure that a user
changes her password the next time she logs on. For example, if you
have to reset a user's password and you give her the password over the
phone, you might want the user to change the password the next time she
logs on.
You can set a user account to require the password to be changed on next logon by completing the following steps:
-
In the Exchange Management Console, expand the Recipient Configuration node and then select the related Mailbox node.
-
Double-click the mailbox entry for the user with which you want to work.
-
On the Account tab, select the User Must Change Password At Next Logon check box. Click OK.
You can use the Set-User cmdlet to perform the same task, following the syntax shown in Example 8.
Example 8. Requiring a user password change
Syntax
Set-User -Identity UserIdentity
-ResetPasswordOnNextLogon <$false|$true>
Usage
Set-User -Identity "Oliver Lee" -ResetPasswordOnNextLogon $true
14. Deleting Mailboxes from User Accounts
When you disable a mailbox for a user account using the Exchange
management tools, you permanently remove all Exchange attributes from
the user object in Active Directory and mark the primary mailbox for
deletion. Exchange Server then deletes the mailbox according to the
retention period you set on the account or on the mailbox database.
Because you only removed the user account's Exchange attributes, the
user account still exists in Active Directory.
In the Exchange Management Console, you can delete a mailbox from a
user account and all related Exchange attributes by right-clicking the
mailbox and selecting Disable. When prompted to confirm this action,
click Yes.
You can use the Disable-Mailbox cmdlet to delete mailboxes while retaining the user accounts as well. Example 9 shows the syntax and usage.
Example 9. Disable-Mailbox cmdlet syntax and usage
Syntax
Disable-Mailbox -Identity Identifier
[-DomainController DCName
]
Usage
Disable-Mailbox -Identity "Oliver Lee"
15. Deleting User Accounts and Their Mailboxes
When you delete a user account and its mailbox using the Exchange
management tools, you permanently remove the account from Active
Directory and mark the primary mailbox for deletion. Exchange Server
then deletes the mailbox according to the retention period you set on
the account or on the mailbox database.
After you delete an account, you can't create an account with the
same name and have the account automatically retain the same
permissions as the original account. This is because the SID for the
new account won't match the SID for the old account. However, that
doesn't mean that after you delete an account, you can never again
create an account with that same name. For example, a person might
leave the company only to return a short while later. You can create an
account using the same naming convention as before, but you'll have to
redefine the permissions for that account.
Because deleting built-in accounts could have far-reaching effects on the domain, Windows doesn't let you delete built-in user accounts. In the Exchange Management Console, you can remove other types of accounts and the mailboxes
associated with those accounts by right-clicking the mailboxes and
selecting Remove. When prompted to confirm this action, click Yes.
Note
Because Exchange security is based on domain authentication, you
can't have a mailbox without an account. If you still need the mailbox
for an account you want to delete, you can disable the account using
Active Directory Users And Computers. Disabling the account in Active
Directory prevents the user from logging on, but you can still access
the mailbox if you need to. To disable an account, right-click the
account in Active Directory Users And Computers and then select Disable
Account. If you don't have permissions to use Active Directory Users
And Computers, ask a domain administrator to disable the account for
you.
You can use the Remove-Mailbox cmdlet to delete user accounts as well. Example 10
shows the syntax. By default, the –Permanent flag is set to $false and
mailboxes are retained in a disconnected state according to the mailbox
retention policy. If you set the –Permanent flag to $true, the mailbox
is removed from Exchange.
Example 10. Remove-Mailbox cmdlet syntax and usage
Syntax
Remove-Mailbox -Identity UserIdentity
{AddtlParams}
Remove-Mailbox -Database DatabaseId
-StoreMailboxIdentity StoreMailboxId
{AddtlParams}
{AddtlParams}
[-Arbitration <$false|$true>] [-DomainController DCName
]
[-IgnoreDefaultScope {$true | $false}] [-KeepWindowsLiveID {$true |
$false}] [-Permanent <$false|$true>]
[-RemoveLastArbitrationMailboxAllowed {$true | $false}]
Usage
Remove-Mailbox -Identity "Oliver Lee"
Remove-Mailbox -Identity "Oliver Lee" -Permanent $true