+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 16
Enterprise Software Thread, Disable email but still have access to AD account in Technical; Hello all, My google is weak, but we have a scenario here where we would like to stop staff from ...
  1. #1
    dsk
    dsk is offline

    Join Date
    Mar 2008
    Location
    London
    Posts
    92
    Thank Post
    7
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Disable email but still have access to AD account

    Hello all,

    My google is weak, but we have a scenario here where we would like to stop staff from having access to their email account, but still be able to log into their machines.

    Is there anyway of doing this? We dont want end users accessing emails at all, so we've disconnected the exchange server from the network.

    thanks in advance!

    Should add the specs:

    Exchange 2007 with latest updates on Server 2008.
    Clients using a mixture of Outlook 2010, phones and OWA
    Last edited by dsk; 18th October 2013 at 12:49 PM. Reason: specs

  2. #2
    buzzard's Avatar
    Join Date
    May 2006
    Location
    North West
    Posts
    299
    Thank Post
    103
    Thanked 27 Times in 23 Posts
    Rep Power
    24
    Yes just delete the users mailbox...

  3. #3
    dsk
    dsk is offline

    Join Date
    Mar 2008
    Location
    London
    Posts
    92
    Thank Post
    7
    Thanked 1 Time in 1 Post
    Rep Power
    0
    We dont want to delete anything, just prevent them from accessing it.

  4. #4

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,711
    Thank Post
    144
    Thanked 548 Times in 492 Posts
    Rep Power
    149
    How do they access their email? In Exchange 2013, you can disable access to OWA for individual users from the ECP.

  5. #5
    dsk
    dsk is offline

    Join Date
    Mar 2008
    Location
    London
    Posts
    92
    Thank Post
    7
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Sorry, should have said at the start we're on exchange 2007 with latest updates and service packs on server 2008 with latest updates.

    The scenario involves a malicious email being set out to a group of people, we dont want staff to see that email hence why im looking for options.

  6. #6
    bushby's Avatar
    Join Date
    Jul 2010
    Location
    winchester
    Posts
    526
    Thank Post
    59
    Thanked 61 Times in 53 Posts
    Rep Power
    30
    on each mailbox on the ECP
    under in the propitiys for the mailbox there is a tab called mailbox features with this just disable the owa and mapi (outlook access) this will then prevent them from getting into their mailbox, you can if need be give full access to required personel and they can dive into the account and remove said emails

  7. #7
    dsk
    dsk is offline

    Join Date
    Mar 2008
    Location
    London
    Posts
    92
    Thank Post
    7
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Yeah, thats the only thing i can think of, is there any way of doing it, obviously they will have a window of being able to access the email whilst we are doing that. This is going to be for about 100 users.

    I was hoping there would be a way of doing in AD somewhere, but i cant see anything obvious.

  8. #8
    bushby's Avatar
    Join Date
    Jul 2010
    Location
    winchester
    Posts
    526
    Thank Post
    59
    Thanked 61 Times in 53 Posts
    Rep Power
    30
    temp disable the accounts whilst the work on the mailbox features is being done? would be the only thing i can say.
    it can be done in bulk for the mailbox features but the mailbox access is per account setting.

  9. #9

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,137
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    77
    do it via the exchange powershell...use a filter or csv file if you have the list of users. you say staff so maybe there is a unique attribute which describes them...

  10. #10
    clareq's Avatar
    Join Date
    Dec 2005
    Location
    Doncaster
    Posts
    693
    Thank Post
    52
    Thanked 188 Times in 124 Posts
    Rep Power
    101
    You should be able to use powershell to delete the e-mail in question - I'm not sure of the exact syntax, but I have done so in the past under similar circumstances - you use a unique phrase in the body of the e-mail and move it to a designated person's mailbox.

  11. #11

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,211 Times in 761 Posts
    Rep Power
    394
    Configure Windows firewall on the Exchange server to only accept connections from the machine(s) that will be used to purge the offending email. Once done, revert firewall rules to normal.

  12. #12
    kevin_lane's Avatar
    Join Date
    Mar 2007
    Location
    Derby
    Posts
    505
    Thank Post
    23
    Thanked 20 Times in 20 Posts
    Blog Entries
    5
    Rep Power
    19
    why do you need to disable access

  13. #13

    Ephelyon's Avatar
    Join Date
    Aug 2008
    Location
    Cheshire, England
    Posts
    1,656
    Thank Post
    283
    Thanked 318 Times in 192 Posts
    Rep Power
    141
    You can use PowerShell to get all mailbox users under e.g. one OU and disable the protocols as mentioned above in (something like) a single command. TechNet has a decent Exchange PowerShell resource or I'm sure a member could assist you with scripting it up if finding the time to research it is very difficult at the moment.

  14. #14
    kevin_lane's Avatar
    Join Date
    Mar 2007
    Location
    Derby
    Posts
    505
    Thank Post
    23
    Thanked 20 Times in 20 Posts
    Blog Entries
    5
    Rep Power
    19

  15. Thanks to kevin_lane from:

    Ephelyon (20th October 2013)

  16. #15

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,822
    Thank Post
    873
    Thanked 1,675 Times in 1,458 Posts
    Blog Entries
    12
    Rep Power
    444
    We do it another way. We have a transport rule that will not allow them to email anybody apart form teachers. That way teaching and learning can continue and they can't email mates

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 53
    Last Post: 6th June 2011, 09:53 AM
  2. [CLOSED] Bug/Error: Sorry, you do not have access to view this page
    By mb2k01 in forum EduGeek.net Site Problems
    Replies: 8
    Last Post: 28th July 2010, 01:31 AM
  3. Anyone have sharepoint that I could have access to?
    By My220x in forum Virtual Learning Platforms
    Replies: 4
    Last Post: 23rd October 2008, 04:47 PM
  4. Replies: 42
    Last Post: 10th April 2007, 09:18 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •