Two Exchange 2007 questions

[AlexPilot]

Hi I would like to do two things and am looking for opinions on the best way to do so.

First I would like to disable a selection of users (example would be the 4th form) from being able to access outlook web access or their email accounts from outlook.

The second would be stopping certain users from being able to email distribution groups. For example we want pupils to not be able to email the "all pupils" distribution group.

Any suggestions?

[sippo]

You can disable web access via Active directory in exchange features.

[spc-rocket]

Hi I would like to do two things and am looking for opinions on the best way to do so.

First I would like to disable a selection of users (example would be the 4th form) from being able to access outlook web access or their email accounts from outlook.

The second would be stopping certain users from being able to email distribution groups. For example we want pupils to not be able to email the "all pupils" distribution group.

Any suggestions?

Hi,

Both are fairly easy to achieve using the Exchange Management Console. You can't do it in AD anymore on Exchange 2007, you need to either using the exchange management shell (powershell) or GUI console.

Disable the user's access to OWA

1) On you exchange management console expand the server to reveal the three branches for management.

2) Click on the last one called Recipient Configuration and then select Mailbox

3) You will see the mailboxes listed there. Select the desired user(s) and right-click and select properties

4) Go to the "Mailbox features" tab and select Outlook Web Access and select disable at the top.

5) Click on Apply and OK your way out of the properties screen

OWA is now disabled for the user.

Restricting emails for Distribution list

Again this can be done by the EMC as well.

1) ON the EMC under Recipient Configuration click on Distribution Groups to list all the distribution groups.

2) Right-click on the relevant DG and select Properties.

3) Click on "Mail Flow Settings" and then click on "Message Restriction"

4) On that screen click the option at below which reads "Reject emails from..."

Click on the + or Add button and browse for a security or distribution list that contains all students accounts.

5) Click Apply and OK

The above procedure may require you to create another security group so you can use this group in the above procedure. This group should contain all student accounts.

I'm writing this of the top of my head so some there may be error.

Ash.

[AlexPilot]

Ash

Many thanks for your help, both suggestions worked great thank you.

When I highlight more than one user and right click properties is not available, is there another way to do the mass disable OWA? There are about 600 users I want to disable temporarily.

[spc-rocket]

Ash

Many thanks for your help, both suggestions worked great thank you.

When I highlight more than one user and right click properties is not available, is there another way to do the mass disable OWA? There are about 600 users I want to disable temporarily.

Hi Alex,

Do you have users in a particular OU and does they have any other information set in the AD attribute to narrow down the list. If you do then you can do this with PowerShell script that will go through and disable the user's access to OWA.

Ash.