Zoo71
asked on
SBS 2012: How to allow email through whilst blocking RDP out of hours for most staff
Hello,
Any help gratefully received.
I am trying to find a solution (cheap) to a problem of how to allow users of Small Business Server 2012 to access email on their phones 24/7 whilst only allowing log on for clients and [most but not all users during working hours.
At the moment we use the SBS account tab to control peoples log on hours however that also cuts off their email on their phones. We use thin clients and terminal servers and user requirements change often so allowing 24/7 hours and blocking rdp by MAC or IP or port is quite restrictive for those occasions when a user needs just 24hr weekend access on a one off basis.
If anyone could suggest how to get SBS to allow 24/7 email whilst controlling log-on access, it would really be appreciated.
Many Thanks
Any help gratefully received.
I am trying to find a solution (cheap) to a problem of how to allow users of Small Business Server 2012 to access email on their phones 24/7 whilst only allowing log on for clients and [most but not all users during working hours.
At the moment we use the SBS account tab to control peoples log on hours however that also cuts off their email on their phones. We use thin clients and terminal servers and user requirements change often so allowing 24/7 hours and blocking rdp by MAC or IP or port is quite restrictive for those occasions when a user needs just 24hr weekend access on a one off basis.
If anyone could suggest how to get SBS to allow 24/7 email whilst controlling log-on access, it would really be appreciated.
Many Thanks
ASKER
Hi RantCan,
Thanks for the comment and interest. I do not see the relevance, we have no problems getting the phones to connect. We use add new account, enter the server and domain etc and emails are received. The only problem is that emails are received only during the logon hours specified in the users properties for their domain account.
I tried looking at Exchange, activesync properties but cannot see anything about time periods for access.
Should we be connecting to the exchange activesync external url. At the moment we just connect to our mail server url which I believe just points straight to our server. It is different from the activesync url..
BTW I am not an IT person as you have probably guessed.
Thanks for the comment and interest. I do not see the relevance, we have no problems getting the phones to connect. We use add new account, enter the server and domain etc and emails are received. The only problem is that emails are received only during the logon hours specified in the users properties for their domain account.
I tried looking at Exchange, activesync properties but cannot see anything about time periods for access.
Should we be connecting to the exchange activesync external url. At the moment we just connect to our mail server url which I believe just points straight to our server. It is different from the activesync url..
BTW I am not an IT person as you have probably guessed.
You should add the server as one of the machines they are allowed to log into, this should allow their mail to move.
ASKER
I will have to refer this back to our IT company. I know remote access to the server is blocked for staff, as we cant have everyone just logging on to the servers. They just do not seem to come up with an easy in-built solution so I wanted to double check on experts exchange.
Could you confirm should emails run 24/7 even if the user log on hours are denied. Our emails move fine 7am to 8pm, or whatever hours are set for that user to log on. Outside those hours no email is received by mobile but fine to access OWA
Could you confirm should emails run 24/7 even if the user log on hours are denied. Our emails move fine 7am to 8pm, or whatever hours are set for that user to log on. Outside those hours no email is received by mobile but fine to access OWA
ASKER
Aah, it seems the answer is no. Activesync will not work out of the users log-on hours.
https://www.experts-exchange.com/questions/27571718/Mail-for-exchange-cant-receive-emails-due-to-logon-hours-in-Active-Directory.html
I appreciate your help and advice. Thank you.
https://www.experts-exchange.com/questions/27571718/Mail-for-exchange-cant-receive-emails-due-to-logon-hours-in-Active-Directory.html
I appreciate your help and advice. Thank you.
I've never used the hours restriction as it adds to management overhead, such as this. I recommend removing it.
ASKER
I've requested that this question be closed as follows:
Accepted answer: 0 points for Zoo71's comment #a40894779
for the following reason:
Discovered answer
Accepted answer: 0 points for Zoo71's comment #a40894779
for the following reason:
Discovered answer
Please have OP post the answer discovered to help other visitors to the site.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
https://social.technet.microsoft.com/Forums/en-US/bcf7e7dc-453f-48fb-b84a-a05fdcf18aae/sbs-2011-standard-exchange-activesync-setup?forum=smallbusinessserver