User access to email but not domain

  • Thread starter Thread starter Ray Lewis
  • Start date Start date
R

Ray Lewis

How can create a user that can access the Exchange email, but can't logon to
the domain? I have a user that will be working temporarily had we don't
want to allow that user to logon to the domain, but we do want to allow them
to check their email through the internet. Currently, the user is only a
member of "Outlook Web Access" and I suppose "Everyone" as well.
 
Ray,

You only can do this bij enabling POP3 access or IMAP.
OWA is not possible.

Bikkelbink
 
So if I disable OWA and set up the user to receive mail in Outlook Express
using POP3, what do I have to do to remove access to the domain? Can a
disabled user account receive POP3 mail?
 
No if you disable the account, it will not be able to receive mail.
I think the only option is, to make a group like "POP3 Users" put the
member(s) into the group, and via Group Policy Deny the Logon Locally policy
for this group.
I never worked with this exact configuration, but it should work.

Bikkelbink
 
This does indeed work... and you can let them use OWA and even RPCoHTTP.
The point is that you deny them logon locally to any of the servers.
 
Ryan,

I was not sure if OWA will still be working, with the option enabled. I
never tried this, and at this moment I can't test this.
I wouldn't be surprised if OWA does not work with this option enabled, but
if you know for sure please let me know, it could come in handy someday.
Thx

Bikkelbink
 
Back
Top