I used to burn the mailbox to media after downloading it onto a PC (in cached mode) and then record the user name, mailbox password, version of groupwise. Then you can always run the GroupWise client against the caching mailbox after restoring it from CD/DVD/TAPE, whatever. Then there's nothing in Edirectory at all relating to the departed and fully deleted user. But their mail lives on when needed.
[/b]But that wasn't my point - the idea of security over ease of use usually doesn't win many hearts and minds!!!![/b]