Outlook Web App - Exchange 2010 - Public Groups

[rh91uk]

Hi all,

 

Am trying to disable the below on my new Exchange 2010 boxes.

 

Can't seem to get it disabled! Can't seem to find the policy for it.

ANyone have any ideas?

 

Thanks,

Rh91uk/Richard

[nadeem]

I'm not sure how to disable them, but you can stop people leaving groups in the membership arroval options when settign up a group (or prevent them joining as well)

[ZeroHour]

I have the proper MS solution listed in a post further down. These instructions are not needed when using the later post instructions.

 

I have found a way to hide each of those links but its not straightforward.

To get rid of any of those navbar links find the id of the menu item you want to remove by using view source or the IE8 dev tools.

For example the groups option is listed in the html as:

</pre><li class="" id="Men

so the id we need is "Menu_1c"

Now browse to the following dir on exchange:

C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\ecp\14.{WHAT EVER IS HIGHEST}\Themes\

Duplicate the Default folder for a backup then go into the Default folder and edit navigation.css and add the follow to the end:

#Menu_1c{display: none; line-height: 0em;}#Menu_1c a{line-height: 0em; display: none;padding-bottom: 0em;padding-left:0em;padding-right:0em;padding-top:0em;}

Now the menu link will be hidden for users (but not strictly disabled). If you wanted to hide other elements just change the ID variable.

You also need to edit navigation-rtl.css as well I think as thats the css for the light version.

 

NOTE: When you install certain patches a new higher numbered 14.0 folder will be made and you will have to repeat this procedure on that directory as well.

Edited April 8, 2010 by ZeroHour

[rh91uk]

Thank you very very very much, does exactly what I wanted

[ZeroHour]

You can revert the settings, I have found a policy way to do it (but it may be useful for future removal of items I suppose)

 

To Disable Groups Option:

 

On your exchange server go to the toolbox->Role Based Access Control

This will launch IE and attempt to open the permissions area. If this does not open/work double check the account your logged in has a mailbox on 2010 first (there are a other couple of reasons it wont work too though)

You should see 2 menu items, "Users & Groups" and "Reporting"

You want "Users & Groups" then switch to the "User Roles" tab. In there edit the "Default Role Assignment Policy" which will pop up in a new window. All you do is remove the checkboxes as required (I disabled all for now) and it will get rid of the option for you.

 

Remember to remove the css edit listed above

Edited April 8, 2010 by ZeroHour

[mrbios]

Fantastic, i didn't even know this was an issue until i happened to glance through the iSpy new posts thing at the top and seen this by chance, only just finished setting up exchange 2010 today! good stuff

[Danp]

Sorry to bump and old post, but this has helped me by removing some menu options via the 'disable group options' as well as adding the line of code to the .css files.

[Jollity]

To continuing with the bumping, if you want to prevent users from creating new groups, but still allow them to manage the membership of groups they own, see this helpful article.

 

The commands I used were:

New-ManagementRole -Name OwnersCanModifyDistributionGroups -Parent MyDistributionGroups_DefaultMailboxPlan -Description "This role enables individual users to  view distribution groups and modify, view, remove and add members to distribution groups they own, but not to create new distribution groups or remove distribution groups."
Remove-ManagementRoleEntry OwnersCanModifyDistributionGroups\New-DistributionGroup
Remove-ManagementRoleEntry OwnersCanModifyDistributionGroups\remove-DistributionGroup

Then in the administrator webpage go to "Roles & Auditing" -> "User Roles" and there should be a new "OwnersCanModifyDistributionGroups" role which you can enable on the default mailbox plan, while disabling the default "MyDistributionGroups" role.