如何使用C#在Exchange邮件服务器创建并检查邮箱账号

我来分享几个在实际项目中验证过的方案，解决用C#连接Exchange创建邮箱ID，以及给新增AD用户配置邮箱的需求：

前置条件 #

• 安装必要的NuGet包：
  • 若用Exchange Web Services (EWS)：Microsoft.Exchange.WebServices
  • 若用Microsoft Graph API（微软推荐的现代方案）：Microsoft.Graph + Microsoft.Identity.Client
• 拥有Exchange组织的管理员权限，或具备Mailbox.Create、User.ReadWrite.All（Graph）等对应操作权限
• 涉及AD用户操作时，需引用System.DirectoryServices.AccountManagement库

场景1：给新增的AD用户创建邮箱（最常用场景） #

如果你的流程是先创建AD用户，再为其绑定Exchange邮箱，可按以下两步实现：

步骤1：创建AD用户并检查重复 #

using System.DirectoryServices.AccountManagement;

public void CreateADUser(string username, string password, string displayName, string domainSuffix)
{
    using (var context = new PrincipalContext(ContextType.Domain))
    {
        // 先检查用户是否已存在
        var existingUser = UserPrincipal.FindByIdentity(context, IdentityType.SamAccountName, username);
        if (existingUser != null)
        {
            Console.WriteLine($"用户 {username} 已存在于AD中");
            return;
        }

        var newUser = new UserPrincipal(context)
        {
            SamAccountName = username,
            DisplayName = displayName,
            UserPrincipalName = $"{username}@{domainSuffix}",
            Enabled = true,
            PasswordNeverExpires = false
        };
        newUser.SetPassword(password);
        newUser.Save();
        Console.WriteLine($"AD用户 {username} 创建成功");
    }
}

步骤2：通过EWS为AD用户创建/启用邮箱 #

using Microsoft.Exchange.WebServices.Data;

public void ProvisionMailboxForADUser(string userPrincipalName)
{
    // 初始化EWS服务连接
    var ewsService = new ExchangeService(ExchangeVersion.Exchange2019);
    ewsService.Credentials = new WebCredentials("admin@yourdomain.com", "YourAdminPassword");
    ewsService.Url = new Uri("https://yourexchangeserver/EWS/Exchange.asmx");

    try
    {
        // 检查目标用户是否已有邮箱
        if (IsMailboxExists(ewsService, userPrincipalName))
        {
            Console.WriteLine($"用户 {userPrincipalName} 已绑定邮箱，无需重复创建");
            return;
        }

        // 发送创建邮箱请求
        var createRequest = new CreateMailboxRequest
        {
            Alias = userPrincipalName.Split('@')[0],
            Name = userPrincipalName.Split('@')[0],
            UserPrincipalName = userPrincipalName,
            SamAccountName = userPrincipalName.Split('@')[0]
        };

        var response = ewsService.CreateMailbox(createRequest);
        if (response.Result == ServiceResult.Success)
        {
            Console.WriteLine($"邮箱 {userPrincipalName} 已成功创建");
        }
    }
    catch (ServiceResponseException ex)
    {
        Console.WriteLine($"创建邮箱失败: {ex.Message}");
    }
}

// 辅助方法：检查邮箱是否已存在
private bool IsMailboxExists(ExchangeService service, string userPrincipalName)
{
    try
    {
        var userInfo = UserInfo.FindByEmailAddress(service, userPrincipalName);
        return userInfo != null;
    }
    catch (ServiceResponseException ex)
    {
        // 捕获"找不到邮箱"的异常，判定为邮箱不存在
        return ex.ErrorCode != ServiceError.ErrorNonExistentMailbox;
    }
}

场景2：直接创建独立Exchange邮箱（比如资源邮箱） #

如果需要创建不绑定AD用户的特殊邮箱（如会议室邮箱），可直接通过EWS实现：

public void CreateResourceMailbox(string mailboxName, string alias)
{
    var ewsService = new ExchangeService(ExchangeVersion.Exchange2019);
    ewsService.Credentials = new WebCredentials("admin@yourdomain.com", "YourAdminPassword");
    ewsService.Url = new Uri("https://yourexchangeserver/EWS/Exchange.asmx");

    var createRequest = new CreateMailboxRequest
    {
        Alias = alias,
        Name = mailboxName,
        MailboxType = MailboxType.Resource
    };

    var response = ewsService.CreateMailbox(createRequest);
    if (response.Result == ServiceResult.Success)
    {
        Console.WriteLine($"资源邮箱 {mailboxName} 创建成功");
    }
}

补充：使用Microsoft Graph API的现代方案 #

微软现在更推荐用Graph API替代EWS，以下是用Graph实现邮箱启用的示例：

using Microsoft.Graph;
using Microsoft.Identity.Client;

public async Task EnableMailboxViaGraph(string userPrincipalName)
{
    // 配置Graph API认证信息
    var clientId = "YourAppClientId";
    var tenantId = "YourTenantId";
    var clientSecret = "YourAppClientSecret";

    var confidentialClient = ConfidentialClientApplicationBuilder
        .Create(clientId)
        .WithTenantId(tenantId)
        .WithClientSecret(clientSecret)
        .Build();

    var authProvider = new ClientCredentialProvider(confidentialClient);
    var graphClient = new GraphServiceClient(authProvider);

    try
    {
        var targetUser = await graphClient.Users[userPrincipalName].Request().GetAsync();
        // 检查用户是否已有邮箱
        if (!string.IsNullOrEmpty(targetUser.Mail))
        {
            Console.WriteLine($"用户 {userPrincipalName} 已拥有邮箱");
            return;
        }

        // 启用邮箱
        await graphClient.Users[userPrincipalName].Request().UpdateAsync(new User
        {
            MailNickname = userPrincipalName.Split('@')[0],
            AccountEnabled = true
        });
        Console.WriteLine($"邮箱已成功启用");
    }
    catch (ServiceException ex)
    {
        Console.WriteLine($"Graph API操作失败: {ex.Message}");
    }
}

注意事项 #

• 生产环境禁止硬编码密码，建议使用密钥管理服务或环境变量存储敏感信息
• 批量操作时建议添加重试机制，避免因网络波动导致操作失败
• 使用Graph API时，需确保Azure AD应用已配置正确的应用权限（如User.ReadWrite.All）

内容的提问来源于stack exchange，提问作者Navya reddy