Wierd Password

[asbasb]

How about a server reboot? Drastic but is it effective? If that works you may try restarting all Exchange services.... .

[asbasb]

How about a server reboot? Drastic but is it effective? If that works you may try restarting all Exchange services.... .

[rajk1984]

I'm thinking an iisreset should work and will test it this weekend. I
know you have to re-authenticate to RWW and OWA when that happens so I
would expect the same result with OMA.

My point is that this seems to be a critical flaw. I mean can you
imagine a Fortune 500 company having to reboot their server every time
they let an employee go? Or is this something unique about SBS server.
Someone else posted the same thing happens on SBS 2008.

This has been more of a curious observation more than anything. I can
certainly reboot the server or restart services in order to fix. But I
am so curious how the big boys handle this.

[natalie]

I suspect this is a non-issue in the corporate world, because few would allow a personal phone on the network. And the phones owned by the business would be remotely wiped and locked (they won't get/send email after that <G>) when an employee is terminated. I have a client that allows the users to use their personal phones. We added a section to the Acceptable Use Policy that states the phone will be wiped if they are terminated. If they don't accept, then they don't use their phone on our network. Be careful remotely wiping an iPhone. I've heard it will brick the device, and they'll have to take it to an Apple store to get reset. And don't forget about all the company contacts and email that are on that phone. I'd be more worried about that than doing an IISReset. This is the same reason we are very stingy with Outlook RPC/HTTP.

[asbasb]

Ah HA!

Go into the mailbox properties of the person, and disable activesync.

It kills the iphone ability to connect/send.

[charlie]

I agree totally. I think Don's iisreset suggestion should work, and that this is a security-related flaw with ActiveSync. Rebooting a server to sort out a no-longer-employed user's ActiveSync connection is a little like squashing a fly by dropping a 50-storey building to the ground. I'm *sure* there's a way to do it, and iisreset seems a reasonable way. Whether it works or not...