This thread on /r/exchangeserver made me wonder, how exactly does CloudPanel handle the removal or disabling of a mailbox?
Does it, prior to issuing the Disable/Remove-Mailbox command also call Set-CASMailbox, disallowing OWA/AS access?
Does it also remove any associated ActiveSync/Mobile devices?
Best regards,
Michael
When CloudPanel disables a mailbox (deleting) it just called the Disable-Mailbox function which removes the Exchange attributes that are tied to the user account (Exchange does this, not CloudPanel). Disable-Mailbox would remove the associated devices from the user account.
When you delete a user from CloudPanel it will first call Disable-Mailbox if they have a mailbox and then delete the user from Active Directory.
I just realized you are talking about disabling an actual user account. To answer your question CloudPanel just disables the account in Active Directory and doesn’t actually change the CAS settings on the mailbox. This does bring up a security concern because of the way Exchange caching the auth tokens which could allow the user to still access the mailbox.
Implementing an option for CloudPanel to change the CAS settings on the mailbox when disabling a USER account with a mailbox is a great idea, but there still will be a few minute delay but that is better than hours.
