Deny User From Own Exchange Mailbox - Banning Students

[FN-GM]

Hi,

 

Our students will be on Exchange 2010 soon. I would like a way where i can drop students in an AD group and they will no longer be able to access there own mailbox. This will be used when they abuse the system or maybe other reasons. Deleting the mailbox isnt an option, they may miss important messages and may loose existing messages.

 

All students live in there own database.

 

I was wondering if anyone has got any options regarding this please?

 

Thanks

[glennda]

you can either setup a GPO which blocks access to outlook.exe for a specified group (and add students to that group). but they can still owa

 

Or simply find kid in EMC and then disable mapi/owa/activsync connections under mailbox features

[clareq]

Whenever we denied access to e-mail completely we had subjects complaining that e-mail was essential to the student's learning. I therefore set up a transport rule (Exchange 2007, but I'd be surprised if you couldn't do it on 2010). This rule states that anyone in the mailgroup "restricted users" can not send e-mail to anyone in the group "students" unless they cc in a member of the group "staff".

[jamesbrown]

We just disable all the mailbox features

[elsiegee40]

Whenever we denied access to e-mail completely we had subjects complaining that e-mail was essential to the student's learning. I therefore set up a transport rule (Exchange 2007, but I'd be surprised if you couldn't do it on 2010). This rule states that anyone in the mailgroup "restricted users" can not send e-mail to anyone in the group "students" unless they cc in a member of the group "staff".

++ rep. I like this

[MicrodigitUK]

Whenever we denied access to e-mail completely we had subjects complaining that e-mail was essential to the student's learning. I therefore set up a transport rule (Exchange 2007, but I'd be surprised if you couldn't do it on 2010). This rule states that anyone in the mailgroup "restricted users" can not send e-mail to anyone in the group "students" unless they cc in a member of the group "staff".

 

I like this idea. What happens if students email themselves? Only asking as some students use email to get work into school?

[clareq]

They can e-mail to their school e-mail address from their personal e-mail without restriction, other than our spam filter. We found that most e-mail misuse was students using e-mail to chat during lessons. This effectively put a stop to that. ICT lessons that required them to e-mail each other was fine, as the students get a pop up telling them they are a member of a restricted group and to cc their teacher into the message.

[FN-GM]

@clareq i like that idea. I shall be looking into that

[Dos_Box]

Whenever we denied access to e-mail completely we had subjects complaining that e-mail was essential to the student's learning. I therefore set up a transport rule (Exchange 2007, but I'd be surprised if you couldn't do it on 2010). This rule states that anyone in the mailgroup "restricted users" can not send e-mail to anyone in the group "students" unless they cc in a member of the group "staff".

 

If we had a 'Tip of the year' contest that would definately be a contender for top slot. Simple, effective, and ever so slightly evil. Well done.

[sonofsanta]

We only let students use Webmail so it's easy to disable the OWA feature on their mailbox and bam - no more email.

 

However... the transport rule does sound a lot funnier

[JonThompson]

In the Exchange 2010 EMC you could just remove NTAUTHORITY\SELF from the mailbox. Stops them logging into it with OWA and Outlook. Thats what we do here for any students found abusing emails.

[FN-GM]

Hi,

 

I have had a bash at creating the transport rule, it doesnt seem to work. Does anybody have any thoughts please?

 

Thanks

Edited May 19, 2012 by FN-GM

[Steve21]

Hi,

 

I have had a bash at creating the transport rule, it doesnt seem to work. Does anybody have any thoughts please?

 

Thanks

 

 

 

As silly as it sounds how long did you wait before trying it? Doesn't the recipiant cache thingy only update once every 3-4 hours?

 

Steve

[FN-GM]

As silly as it sounds how long did you wait before trying it? Doesn't the recipiant cache thingy only update once every 3-4 hours?

 

Steve

 

I left it an hour, i will leave it overnight and try again in the morning. Thanks

[FN-GM]

As silly as it sounds how long did you wait before trying it? Doesn't the recipiant cache thingy only update once every 3-4 hours?

 

Steve

 

That was the issue, works fine this morning!

Thanks

[Steve21]

That was the issue, works fine this morning!

Thanks

 

good to hear! Nothing more annoying than spending time fixing something only to find it needs time lol

 

Steve