Best Practices: Employee Departure?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi,
I know this question has probably been asked a million times, but I have
scoured Technet, KB, and numerous other venues searching for the various
suggested methods for closing out after an employee departs...

I have stepped into the IT position at a small company that uses Win2000
Active Directory and Exchange 2000. I am trying to determine the best policy
for cleaning up after an employee leaves.

Currently I disable the account in AD, remove the user from all security
groups, and set the Exchange server to forward all mail to the employees
manager. This has caused me to start seeing the 9548 error: missing Master
Account SID and hence I know this is likely not the best way to do things....

Any information appreciated!
Clark Freeman
 
Actually.
I must say you rocks!
It's one of the best solutions to deal with employees leaving mid-size
companies. You have done a grate job so far.

The master SID issue is a know issue for disabled mail-box e-enabled users.


You should be able to fix the problem using the following approaches:

. Remove the disabled accounts from the ACL.

. Give the disabled accounts associated external accounts.



--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services


No email replies please - reply in the newsgroup
 
If you want to disable the account, you need to give the SELF user on the
mailbox the "Associated external mailbox" option. This will allow it to
receive mail.

Alternatively, you can just disable all login hours for the account,
preventing it from logging in, and not requiring a security modification.

You might as well also remove the user from any distribution lists. This
way their mailbox doesn't fill up with unnecessary mail and it's easier to
sort through.

I typically give the persons manager full access to the terminated mailbox
and add it as a secondary box in outlook. This way the manager can see all
the mail, not just the forwarded items.
 
Back
Top