User move - chinese wall

[GertjanA]

Hello all,

When a user moves from 1 department to another, and internal rules dictate that the user should not have access to mails from department 1 or the archived ones, how would we do it?

We were thinking:

disable user for archiving

archive mailbox 0-day archiving policy

delete exchange attributes (ie disconnect mailbox)

create new mailbox

enable user for archiving

How about permissions on the original archive?

How about the new archive, would that be created?

Should we delete the entry in the Exchangeentry table before provisioning?

[Maverik · Accepted solution]

How about permissions on the original archive?

If they inherit from original mailbox just change permissions on this mailbox and sync new permissions how you want them.

How about the new archive, would that be created?

If you do the way you say I believe so.

Should we delete the entry in the Exchangeentry table before provisioning?

Would not hurt to do this in this scenario.

[GertjanA]

will let you know