SBS2003 Defining users who can use OWA but not Connect to their Computer at Work.

Posted on 2005-05-05
Last Modified: 2010-04-18
I have a standard installation of SBS2003 for a client. All users currently have the ability to access the Remote Web Workplace. However, I've been asked to only allow *some* to use the site to connect to their computer at work. I still want to allow everyone else to use Outlook Web Access. What's the best way to accomplish this?
Question by:IntenseV8
    1 Comment
    LVL 74

    Accepted Solution

    By default, the "User" template allows for RWW access to the user's desktop.  Rather than messing with this template, I would create a separate "security group" to add the users that you DON'T want to have access and then create a GPO which denies access to that group.  They can then use to directly access OWA and if they tried to use RWW they wouldn't succeed. (Although they would have the ability to access the companyweb from there which could be a good thing, generally.

    If you like you can clone the "user" template and call it "restricted user" template... then add your new security group to the template's group membership so new users which fit this criteria will automatically be added.

    The GP item which needs to be set is this:
    Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment > Deny Logon through Terminal Services


    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    Join & Write a Comment

    I have never ceased to be amazed how many problems you can encounter on a fresh install of a Windows operating system.  This is certainly case in point& Unable to complete ANY MSI installation.  This means Windows Updates are failing and I can't …
    Learn about cloud computing and its benefits for small business owners.
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now