We help IT Professionals succeed at work.

It's possible to have a mail id (jfolley@domain.com) but disallow the id to login into AD? If yes, how could they read their mail?

llarava
llarava asked
on
It's possible to have a mail id (jfolley@domain.com) but disallow the id to login into AD? If yes, how could they read their mail?
Comment
Watch Question

Yes. Just set up an alias email for jfolley@domain.com. Now if that is actually their username it depends on which version of Exchange you are running. If it is 2007, you may be able to disable the user account and they could still access email through OWA. In 2003 if you disable the user account in AD, it will disable their mailbox too. Alternately you could add them to AD as a contact (I don't think this gives them login rights to the domain) and then add a mailbox for that contact.

Author

Commented:
cedarghost:
I have Exchange 2003. Could you please be a little more specific about what you said for contacts. How can I do that? Let's work based on the following scenario. The domain name is contoso.com, the user name and email account is testuser@contoso.com. How can I block the user to log on the domain but let him to check his email?
Thanks.

Commented:
"Alternately you could add them to AD as a contact (I don't think this gives them login rights to the domain) and then add a mailbox for that contact."


Contacts cannot have mailboxes in Exchange 2003
Commented:
Exchange mailbox objects are integrated with the user account in AD.  If you can't access your user account you essentially cannot access your mailbox.  If you want to deny a user to log in, you will have to deny their user accound the rights to 'log in locally' on the workstations in your domain.  this should still allow access to the mailbox through OWA.  Use group policy to deny a group access to log in locally and add the user's account to that group.

Explore More ContentExplore courses, solutions, and other research materials related to this topic.