When team members leave an organisation, their Microsoft 365 accounts are typically disabled, but their emails and documents don't disappear. As an IT admin, you may need to access this data for compliance, project continuity, or document recovery. Here's how to do it safely and legitimately.
Why You Shouldn't Re-enable the Account
Re-enabling a disengaged user's account creates unnecessary security risks and may violate your organisation's offboarding policy. The good news: Microsoft 365 gives admins multiple ways to access data from disabled accounts without touching the account status.
Method 1: Grant Yourself Mailbox Access (Admin Center)
The quickest way to read a disabled user's emails from Outlook.
Steps:
- Go to admin.microsoft.com
- Navigate to Users → Active Users (suspended users still appear here)
- Click the disabled user → Mail tab
- Under Mailbox permissions, add yourself as Read and Manage (Full Access)
- Wait 15–30 minutes for permissions to propagate
⚠️ Note: Always forward emails from your own account, never send as the disengaged user — that constitutes impersonation regardless of permissions.
Method 2: Add the Mailbox in Outlook
Once you've granted access, add the mailbox in Outlook.
Outlook Desktop
- Click File → Account Settings → Account Settings
- Select your account → Change → More Settings → Advanced tab
- Under Open these additional mailboxes, click Add
- Enter the disabled user's email address → OK → Finish
Outlook on the Web (Faster)
- Go to outlook.office.com
- Right-click Folders in the left sidebar
- Select "Add shared folder or mailbox"
- Type the disabled user's email address → Add
The mailbox appears instantly in your sidebar.
Method 3: Microsoft Purview (Best for Compliance & Bulk Export)
For searching and exporting emails and documents — especially across multiple accounts — Microsoft Purview is the most powerful option.
- Go to compliance.microsoft.com
- Navigate to Content Search → New Search
- Set locations to the disabled user's mailbox and OneDrive
- Check "Include archive mailbox"
- Run the search → Export as
.pstor download files directly
✅ No account re-enablement needed. Works on suspended and blocked accounts.
Summary: Choosing the Right Method
| Goal | Best Method |
|---|---|
| Read one user's emails | Shared mailbox in Outlook |
| Access archive mailbox | PowerShell + Outlook Web |
| Recover OneDrive files | Admin Center link or PowerShell |
| Search & export bulk data | Microsoft Purview Content Search |
| Manage multiple users at once | PowerShell bulk script |
| Centralise incoming mail | Forwarding to shared mailbox |
Important Reminders
- Never send email as the disengaged user — even with Send As permissions, this is impersonation and is logged in Microsoft's audit trail
- Deleted accounts have a 30-day recovery window — after that, data may be permanently lost unless retention policies were in place
- Always document your actions — especially in regulated industries (finance, healthcare, legal), keep a record of why and when you accessed the data
- Use Purview for legal holds — if the data may be needed for disputes or audits, place a hold before accessing or exporting
Conclusion
Microsoft 365 gives admins robust tools to access data from disengaged users without compromising security or re-enabling accounts. For one-off access, the Admin Center and Outlook shared mailbox approach works well. For multiple users or compliance needs, PowerShell and Microsoft Purview are your best friends.
Have questions or a specific scenario? Drop them in the comments below!
Tags: microsoft365 powershell it-admin exchange productivity
Top comments (0)