How to Automate Exchange Mailbox Conversion to Shared Mailbox
When an employee leaves your organization, converting their mailbox to a shared mailbox is one of the most important post-termination tasks. This allows managers and team members to access important emails without consuming an expensive license.
Why Convert to Shared Mailbox?
Cost Savings
Shared mailboxes under 50GB don't require a license in Microsoft 365, saving your organization $5-$20 per month per user.
Email Retention
Maintains access to important customer communications, project history, and business records.
Team Collaboration
Multiple team members can access the mailbox to handle ongoing projects and customer inquiries.
Exchange Online Mailbox Conversion
Prerequisites
- Exchange Online admin permissions
- PowerShell module installed
- User account must be licensed (temporarily)
Step-by-Step Process
1. Connect to Exchange Online
First, establish a connection to Exchange Online PowerShell.
2. Convert the Mailbox
Run the conversion command to change the mailbox type from User to Shared.
3. Configure Auto-Reply
Set up an automatic reply informing senders that the employee has left.
4. Hide from Global Address List
Remove the mailbox from the GAL so users don't see it in Outlook autocomplete.
5. Grant Access Permissions
Assign Full Access and Send As permissions to the user's manager or team.
6. Remove the License
After 24-48 hours, remove the Microsoft 365 license to stop charges.
Exchange On-Premises Conversion
For Exchange Server on-premises, the process is similar but uses different PowerShell cmdlets:
- Connect to on-premises Exchange Management Shell
- Use Set-Mailbox cmdlet with -Type Shared parameter
- Configure mailbox delegation and auto-reply
- Hide from address lists
Hybrid Environment Considerations
Directory Synchronization
In hybrid setups, ensure Azure AD Connect properly synchronizes the mailbox type change.
Mailbox Location
Verify whether the mailbox is hosted on-premises or in Exchange Online before running commands.
License Management
Coordinate license removal with mailbox conversion to avoid access issues.
Best Practices
Timing
- Convert mailboxes 30 days after termination to allow for transition period
- Set calendar reminders to remove licenses after 48 hours
- Document the conversion date in your ticketing system
Permissions
- Grant Full Access for reading emails
- Grant Send As only when necessary for continuity
- Avoid Send on Behalf as it shows the sender's name
- Review and remove permissions after 90 days
Auto-Reply Message
Set a professional automatic reply:
"Thank you for your email. [Employee Name] is no longer with [Company Name]. For assistance with [topic], please contact [New Contact] at [email]. For general inquiries, email [team email]."
Common Issues and Solutions
License Stuck After Conversion
Problem: Unable to remove license after converting to shared mailbox
Solution: Wait 24-48 hours for replication, then remove through Azure AD
Mailbox Size Over 50GB
Problem: Shared mailbox still requires license due to size
Solution: Archive old emails or use retention policies before conversion
Mobile Devices Still Connected
Problem: Former employee's phone still syncing email
Solution: Remove all mobile device partnerships before conversion
Calendar Not Accessible
Problem: Can't access converted mailbox calendar
Solution: Grant Calendar permissions separately from mailbox permissions
Automation with ADATT
Manual mailbox conversion involves multiple steps and potential errors. ADATT automates the entire workflow:
- ✓ Automatic conversion 30 days after termination
- ✓ Configurable auto-reply messages
- ✓ Intelligent license removal
- ✓ GAL hiding and permission management
- ✓ Bulk conversion for multiple terminated employees
- ✓ Complete audit trail for compliance
Automate Your Mailbox Conversions
Stop manually converting mailboxes and risking forgotten licenses. ADATT handles Exchange Online and on-premises conversions automatically.
Continue Reading
PowerShell Scripts for AD Offboarding: Free Templates for IT Admins
Ready-to-use PowerShell scripts for automating Active Directory employee terminations. Free templates with step-by-step instructions and best practices.
Complete Active Directory Offboarding Checklist for IT Admins
A comprehensive guide to properly offboarding employees in Active Directory environments. Learn the critical steps IT administrators must take to ensure security and compliance.
Intune Device Management During Employee Termination
Complete guide to managing Intune devices when employees leave. Learn about selective wipe vs full wipe, BYOD policies, and compliance requirements.
Automate onboarding & offboarding across Active Directory and Microsoft 365