BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 10-13-2009, 07:45 AM   #1 (permalink)
AJB
New Member
 
Join Date: Oct 2009
Model: 6883
PIN: N/A
Carrier: Verizon
Posts: 3
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default Disable Exchange Email on Blackberry

Please Login to Remove!

We have Five blackberry users in our office who own their own Blackberry's.. We set all their blackberry's email account from the blackberry itself and selected Exchange email account. All the email accounts work fine. One of the employees is no longer with us, we need to disable their ability to retrieve email on their blackberry. We tried disabling their Active Directory account and the blackberry still receives email. I'm trying to figure out how the blackberry is able to authenticate when the AD account has been disabled. Anyone with any idea's please chime in. I feel that this is a large security hole. Thanks.
Offline  
Old 10-13-2009, 09:09 AM   #2 (permalink)
BlackBerry Mensa
 
takeshi's Avatar
 
Join Date: Jan 2005
Location: Houston
Model: 8310
Carrier: at&t
Posts: 7,741
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

You really need to remove the email account from BIS/email setup. I'm assuming that you're using BIS since you don't mention a BES server.

It does seem like disabling the AD account should break email delivery. I really can't offer any suggestions there but the step above is a precaution that you should be taking in addition to disabling the user's email.

Last edited by takeshi : 10-13-2009 at 09:12 AM.
Offline  
Old 10-13-2009, 10:34 AM   #3 (permalink)
AJB
New Member
 
Join Date: Oct 2009
Model: 6883
PIN: N/A
Carrier: Verizon
Posts: 3
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Thanks you for the input. Yes, we are using BIS. The biggest problem I have is that I no longer have access to that person's personal blackberry. And I can't just delete their email account from exchange as I need to forward their mail to another user for some time. I realize that disabling their AD account does not stop exchange from receiving mail to their account (I would need to delete their exchange mailbox), but I thought that it would have at-least kept the blackberry from being able to authenticate against the exchange account. Anyone else have any other suggestions?
Offline  
Old 10-13-2009, 11:12 AM   #4 (permalink)
Latino Hasta La Muerte
 
Join Date: Jan 2005
Location: Denville, NJ.
Model: 7250
OS: 4.1
PIN: G!!!
Carrier: Verizon
Posts: 9,022
Post Thanks: 50
Thanked 303 Times in 291 Posts
Default

Disabling their account on the carrier's BIS page should do it. You need their password though to log in and make the deletion. Are the users getting their mail through a generic public email service like GMail, or do you have a company domain name for email accounts? Something like [email address]?
Offline  
Old 10-13-2009, 11:57 AM   #5 (permalink)
BlackBerry God
 
penguin3107's Avatar
 
Join Date: Jan 2005
Model: iOS 5
Carrier: VZW
Posts: 11,701
Post Thanks: 1
Thanked 237 Times in 219 Posts
Default

Quote:
Originally Posted by AJB View Post
Thanks you for the input. Yes, we are using BIS. The biggest problem I have is that I no longer have access to that person's personal blackberry. And I can't just delete their email account from exchange as I need to forward their mail to another user for some time. I realize that disabling their AD account does not stop exchange from receiving mail to their account (I would need to delete their exchange mailbox), but I thought that it would have at-least kept the blackberry from being able to authenticate against the exchange account. Anyone else have any other suggestions?
Disable OWA, POP and IMAP access for the user.
__________________
BCSA
BES 5.0.3 MR4 :-: Exchange 2007 SP3 RU3
http://port3101.org
Offline  
Old 10-13-2009, 01:04 PM   #6 (permalink)
AJB
New Member
 
Join Date: Oct 2009
Model: 6883
PIN: N/A
Carrier: Verizon
Posts: 3
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Yes we are using our own domain name email. We are running exchange 2003. As far as disabling OWA, POP and IMAP, I think one of the other IT guys tried that, but I wlil double check with him.

Quote:
Originally Posted by rambo47 View Post
Disabling their account on the carrier's BIS page should do it. You need their password though to log in and make the deletion. Are the users getting their mail through a generic public email service like GMail, or do you have a company domain name for email accounts? Something like ?
Offline  
Old 10-26-2009, 11:06 PM   #7 (permalink)
New Member
 
Join Date: Nov 2008
Model: 8330
PIN: N/A
Carrier: Alltel
Posts: 1
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

This seems more like an Exchange/AD issue to me, it seems like you could be having some type of replication issue I say this because we have many employees that own their blackberry and just set it up using BIS and a simple password change will break their email let alone deleting them from AD and exchange, I would go onto the exchange server and delete the user from the actual exchange user snap in cause if they are still listed there then you can be sure that your DC is not replicating with your exchange server completely. I would also track down their actual mailbox and delete it.
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.