This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 46%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER4%3C/text%3E%3C/svg%3E)
In o365 when you convert a user mailbox to a shared mailbox for a user who has been removed, the user account in entra needs to be present and active in order for the shared mail box to work correct? I have found setting the account to disabled causes the user and mailbox to be removed since the user account is no longer in the sync scope onprem.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(272, 60%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EK%3C/text%3E%3C/svg%3E)
Yes. If you convert the user mailbox to shared mailbox, the user account must be present in the Entra. In case if you don't want to keep the user account in Entra, you can try converting to inactive mailbox.
After you convert the mailbox to inactive mailbox, you can delete the user account.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 26%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJL%3C/text%3E%3C/svg%3E)
Hi @rr-4098，
Thanks for posting your question in the Microsoft Q&A forum.
You are correct, do not delete the old user's account because it is needed to locate the shared mailbox. If the user account has been deleted, you need to restore the user's account first and then add the member to the shared mailbox.
Refer to: Convert a user mailbox to a shared mailbox - Microsoft 365 admin | Microsoft Learn
Restore a user - Microsoft 365 admin | Microsoft Learn
If you have any questions, please feel free to contact me. If the answer is helpful, please click "Accept Answer" because it can help other members of the Microsoft Q&A community who have encountered similar problems and are looking for solutions. Thank you.
Best,
Jeanne
Thank you for the feedback. My concern is that the entra ad account needs to be enabled for the shared mailbox to work. With an onprem exchange server the reference account was disabled. My concerns are with security. I think I read o365 changes the password on the account once it is covered to a shared mailbox. Is this correct? Is there a way to have an account enabled in entra but block interactive login?
Hi @rr-4098，
Thanks for your reply, you can create a conditional access policy by following the steps below and select the account you want to block interactive logon.
Refer to: Risk policies - Microsoft Entra ID Protection | Microsoft Learn
If you have any questions, please feel free to contact me. If the answer is helpful, please click "Accept Answer" because it can help other members of the Microsoft Q&A community who have encountered similar problems and are looking for solutions. Thank you.
Best,
Jeanne
I think I figured things out ... going forward the proper way to convert a shared mailbox that has a synced account from onprem is to: convert the mailbox to shared, remove license, move the account out of the synced OU correct?