Windows Server - E-mail Only

Asked By Tim H

20-Nov-09 09:04 AM

I have a customer who is asking to have 5 users setup with only an e-mail
account.  They do not want them accessing the network.  Is it possible for
someone to only have access to OWA and nothing else?

Basic setup: SBS 2003 Standard 10 users.


Thanks!
Tim

20-Nov-09 09:25 AM

Hi Tim,

Try this: (once you have the user accounts created)

Server Management | Standard Management | (double click a user account in
the right pane) | Account (tab) | "Log on to"

Now specify just the SBS server.  This should restrict the user to logging
into RWW or OWA, but not let him log on locally or remotely to workstations.
(Note:  he will not be able to log into the SBS server locally or remotely
either)

--
Merv  Porter   [SBS-MVP]
============================

20-Nov-09 09:44 AM

I am not sure you need to provide access even to the server. Certainly in SBS
2008, you do not. In fact, setting this in SBS 208 is trivial - you simply
create the user without assigning them to any computers. They'll have OWA
rights without any local logon rights.

--
Charlie.
http://msmvps.com/blogs/russel

20-Nov-09 10:22 AM

Charlie@mvKILLALLSPAMMERSps.org says...

If you do not give them access to the server they will not be able to RWW,
but they can still OWA.

Since we never setup file/folder access for "Everyone" or "Domain
Users", since we create new security groups for every business folder,
it is fairly easy to make Email Only accounts, but we do not allow them
RWW access either, just OWA.

--
You cannot trust your best friends, your five senses, only the little
voice inside you that most civilians do not even hear -- Listen to that.
Trust yourself.
spam999free@rrohio.com (remove 999 for proper email address)

20-Nov-09 12:19 PM

Hmm.  I thought that was only for RWW. I thought all domain users by default
had local login privileges on all domain workstations (I certainly want them
to). If you are talking about via RWW, then yes, that is correct. I always add
the Remote Web Workplace Users group to each workstation's Remote Desktop
Users group....you can then add/remove domain users to that as needed for
remote access. (I also add the user's primary computer in the SBS2008 wizard
thingy so they have RWW access easily)

I like to do that too. I set up security groups for my clients and use them
to secure the shared folders. When a temp or visitor needs an account i can
easily create it and simply not add them to the groups they do not need to be
in.

20-Nov-09 11:12 PM

I have created numerous accounts with this in mind, for remote email-only
users. They simply access OWA with a direct URL that I make provisions to
work by adding it to the html in the Company Web page when connecting to SBS
from the outside. But I do secure it with SSL and disable anonymous, so on
the initial connection, they must provide credentials, then the company web
pops up, and they can click on a link that I created called (you can call it
what you like), "Connect to Microsoft Exchange WebMail." I even took a
picture of an envelope and made it into an icon for the link.

As for ADUC, in the user account properties, Account tab, Logon To, I click
does not affect accessing the company web site nor Exchange OWA.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

01-Dec-09 05:23 PM

Some day I'd love you to show me how you did that :)

01-Dec-09 06:33 PM

I can remote in...