locked
Limit Which Mailbox Features New Mailboxes get in Exchange 2007 RRS feed

  • Question

  • When we create new mailboxes in Exchange 2007 all of the new mailboxes get features turned on that we do not need or want turned on by default. When a new mailbox is created in Exchange we anly want MAPI and Outlook Web Access on by default on all new mailboxes. How can we make that happen?


    Thanks - Bob Randall IT Specialist USNRC

    Monday, August 13, 2012 7:55 PM

Answers

  • As Rich mentioned you'll have to script it and set it as a scheduled task to run routinely.

    Get-Mailbox | Set-CASMailbox -activesyncenabled:$false -POPEnabled:$false


    James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

    • Marked as answer by BRandall68 Tuesday, August 14, 2012 11:46 AM
    Monday, August 13, 2012 8:27 PM

All replies

  • On Mon, 13 Aug 2012 19:55:11 +0000, BRandall68 wrote:
     
    >When we create new mailboxes in Exchange 2007 all of the new mailboxes get features turned on that we do not need or want turned on by default. When a new mailbox is created in Exchange we anly want MAPI and Outlook Web Access on by default on all new mailboxes. How can we make that happen?
     
    You can script the creation of new mailboxes and customize them in any
    way you like (well, almost any way).
     
    ---
    Rich Matheisen
    MCSE+I, Exchange MVP
     

    --- Rich Matheisen MCSE+I, Exchange MVP
    Monday, August 13, 2012 8:01 PM
  • As Rich mentioned you'll have to script it and set it as a scheduled task to run routinely.

    Get-Mailbox | Set-CASMailbox -activesyncenabled:$false -POPEnabled:$false


    James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

    • Marked as answer by BRandall68 Tuesday, August 14, 2012 11:46 AM
    Monday, August 13, 2012 8:27 PM
  • On Mon, 13 Aug 2012 20:27:10 +0000, Jamestechman wrote:
     
    >
    >
    >As Rich mentioned you'll have to script it and set it as a scheduled task to run routinely.
    >
    >Get-Mailbox | Set-CASMailbox -activesyncenabled:$false -POPEnabled:$false
     
    I do something similar with pop/imap/activesync protocols and a few
    other things. Separate group memberships keep track of who can use
    what. If you're in the group you can use the protocol, if you're not
    you can't. It runs several times each day and the ony annoying thing
    is people that expect to use something immediately instead of waiting
    a couple of hour for the scripts to manage things.
     
    But I was really commenting more on the actual creation of the user
    and mailbox, assigning default group memberships, customized display
    names, non-standard e-mail address creation (beyond the simple %g, %s,
    %d, etc. stuff in the EAP), assigning mailbox quotas, and all other
    manner of day-to-day provisioning of users.
     
    ---
    Rich Matheisen
    MCSE+I, Exchange MVP
     

    --- Rich Matheisen MCSE+I, Exchange MVP
    Monday, August 13, 2012 8:43 PM
  • Thank you for the input! It is hard to believe though that you can't set it in the GUI to not turn those features on when new Mailboxes are created. Why would they make that powershell only? Seems to be a basic requirement to me.

    Thanks - Bob Randall IT Specialist USNRC

    Tuesday, August 14, 2012 1:24 AM
  • No, you also can set that in Exchange management console.

    When you created the mailbox, you can disable POP3 and ActiveSync features this way:

    Open Exchange Management console->Recipient Configuration->Mailbox-> user mailbox->properties->Mailbox features

    Thanks,

    Evan Liu

    TechNet Subscriber Supportin forum

    If you have any feedback on our support, please contact tngfb@microsoft.com 


    Evan Liu

    TechNet Community Support

    Tuesday, August 14, 2012 3:23 AM
    Moderator
  • On Tue, 14 Aug 2012 03:23:19 +0000, Evan Liu wrote:
     
    >
    >
    >No, you also can set that in Exchange management console.
    >
    >When you created the mailbox, you can disable POP3 and ActiveSync features this way:
    >
    >Open Exchange Management console->Recipient Configuration->Mailbox-> user mailbox->properties->Mailbox features
     
    Sure, but you do that for each and every mailbox you create (and don't
    forget to do it!). If you have a handful of mailboxes that might be
    okay, but if you're creating hundreds a week you'll want to automate
    that. That's what Powershell's for.
     
    ---
    Rich Matheisen
    MCSE+I, Exchange MVP
     

    --- Rich Matheisen MCSE+I, Exchange MVP
    Tuesday, August 14, 2012 3:37 AM
  • we have same requirement. we need to allow active sync & OWA access to restricted users. so our admin some times forgot to disable it while creating new mailboxes. so we planned to disable owa & active sync by default and need to enable if required only

    Get-Mailbox | Set-CASMailbox -activesyncenabled:$false -POPEnabled:$false

    it will disable all users. we don't want disable it for all users. already we have allowed few users for accessing same. 


    kesav

    Tuesday, August 14, 2012 4:39 AM
  • Understood, but that isnt helpful. I know you can do it manually I just think its crazy that you cant set a default template for all users to turn that feature off for EVERYONE when new mailboxes are created. Changing each mailbox manually when created is too cumbersome and rediculous when POP3 and IMAP4 are not approved in our environment. It is too bad MS hasnt thought to make default mailbox templates or Mailbox Feature rules for things like this.

    Thanks - Bob Randall IT Specialist USNRC

    Tuesday, August 14, 2012 11:45 AM
  • On Tue, 14 Aug 2012 04:39:13 +0000, RK7L wrote:
     
    >
    >
    >we have same requirement. we need to allow active sync & OWA access to restricted users. so our admin some times forgot to disable it while creating new mailboxes. so we planned to disable owa & active sync by default and need to enable if required only
    >
    >Get-Mailbox | Set-CASMailbox -activesyncenabled:$false -POPEnabled:$false
    >
    >it will disable all users. we don't want disable it for all users. already we have allowed few users for accessing same.
     
    Use this pseudo-code as an example to do what you want by keeping only
    the users that should have a protocol enabled as members of a group.
     
    If <user:protocol> enabled
    {
    If <user is not member of group>
    {
    disable protocol for user
    }
    }
    elseif <user is member of group>
    {
    enable protocol for user
    }
     
    ---
    Rich Matheisen
    MCSE+I, Exchange MVP
     

    --- Rich Matheisen MCSE+I, Exchange MVP
    Wednesday, August 15, 2012 12:48 AM
  • On Tue, 14 Aug 2012 11:45:08 +0000, BRandall68 wrote:
     
    >Understood, but that isnt helpful. I know you can do it manually I just think its crazy that you cant set a default template for all users to turn that feature off for EVERYONE when new mailboxes are created. Changing each mailbox manually when created is too cumbersome and rediculous when POP3 and IMAP4 are not approved in our environment. It is too bad MS hasnt thought to make default mailbox templates or Mailbox Feature rules for things like this.
     
    You can't get more flexible than doing it yourself in Powershell.
     
    ---
    Rich Matheisen
    MCSE+I, Exchange MVP
     

    --- Rich Matheisen MCSE+I, Exchange MVP
    Wednesday, August 15, 2012 12:50 AM
  • Hi Rich,

    can you give little bit more details in script i.e, we want to disable active sync all users except users in "Active Sync" group. 


    kesav

    Tuesday, August 21, 2012 4:58 AM