Converting a resource account with email to a shared mailbox


OVERVIEW

Target audience: Members of the McGill community who currently use resource accounts to send/receive email through a common mailbox.

In the past, when groups requested a common email address to be used by multiple people, they were given a resource account, with its own username and password. 

Now, and as part of McGill’s ongoing efforts to strengthen our information security posture, in January 2023, the IT Services team conducted an analysis of the usage/creation of resource accounts and observed a significant increase. As many of these resource accounts are accessed using shared passwords, and cannot be secured with Two-factor authentication (2FA), they pose a risk to McGill’s data, systems, and its community. IT Services is now conducting a security review of all resource accounts with the goal of either converting each resource account to another type of non-personal account or deactivating it.  

In addition, as of March 2023, the provisioning of resource accounts has been discontinued. 

In this article:

Benefits of a shared mailbox


Why should my resource account be converted?

Your resource account should be converted to a shared mailbox if its purpose is to send/receive email from a common account, and each user has their own McGill Username/Password credentials and an Office 365 account.   

Note that the converted shared mailbox has nearly the same functionality as a resource account; however, it will be accessed and managed through each user’s own Outlook account and does not require a password.  

 

warning

Need more information?

If a shared mailbox does not seem like the right solution for your business need, please review the this article for information on other non-personal accounts and related services offered: About: Non-personal accounts

 


Request a shared mailbox: Steps and process

Once the request to convert a resource account to a shared mailbox has been submitted, the IT Services team will email the account sponsor/requester prior to starting the conversion process to alert them that they are starting.

The conversion of a resource account to a shared mailbox may require up to 45 minutes and during this period, the resource account will not be accessible. This is why the IT Services team notifies the sponsor/requester via email before starting the conversion, as during this time, the resource account may prompt for a password entry, which will fail.

As soon as the resource account is converted to a shared mailbox, the IT Services team will send an email confirmation that the conversion was performed successfully. In addition, the email will contain instructions on how to remove the resource account (which is no longer valid) and add a shared mailbox (see instructions below) in Outlook on desktop, web or mobile app.

Setup options

When submitting the form to request a shared mailbox, you can select certain options. These settings apply to the mailbox and cannot be individually set for each user. 

Default settings:

Send options:

IMPORTANT: Once a resource account has been converted to a shared mailbox, you must first remove the resource account from your Outlook on desktop, web or mobile app before mapping your new shared mailbox.  Otherwise, you will be continuously prompted to enter the resource account’s password and access will fail. This information applies to all users of the resource account and the shared mailbox. 

Instructions to remove a resource account and add/access a shared mailbox


Known issue affecting search function on large shared mailboxes

If a mailbox of over 50 GB is added as a regular Exchange mailbox using “Add account” (see screenshot below), the search function may not return consistent results.   

Screenshot of adding mailbox

 

As a workaround, perform the following steps in Office 365 (note that these will not work in Office 2016): 

You can set up the shared mailbox as a regular account through Outlook but when it prompts you to log in, enter your own credentials. 

In the window below, enter the shared mailbox username.  

Screenshot of username dialog box

When prompted for the username and password, enter your own username and password. 

The shared mailbox setup should then continue as expected, and the account will be added separately as it was before (and not through the "Add account” feature). 

Screenshot of added account

 

references

ADDITIONAL REFERENCES: