Link to home
Start Free TrialLog in
Avatar of rccomp
rccomp

asked on

Allowing email access only

The company is letting go an employee from their current position.  However becasue they will still be working from home, they want to be able to let them have access to OWA.  

I want to make sure the users other rights are disabled.

How can I do this?  Do I need to create a whole new user template?
Avatar of MichaelVH
MichaelVH
Flag of Belgium image

To make sure this user has only rights to OWA, move the user out of the domain users groups. Create a new group "OWA" (or something like that) and grant the OWA-group rights to access OWA. That way you'll ensure the user only has access to OWA.

You could do so as well with a new account.
The user will have to be left in Domain Users at least, to login. If you try and remove the user from that group then things will not work.

Run the wizard and change the user's permissions so that they cannot login remotely.

Simon.
Avatar of rccomp
rccomp

ASKER

So which is the right answer.  I only want the user to be able to use OWA, nothing else.....

Conflicting answers are always so much fun.
Sembee,

if you move the users out of the "Domain Users" group, set it into another group and give that new group access to OWA (and the minimum things needed), that should work, shouldn't it?

Michael
Domain Users is the default group and is required for the user to login to the domain. The user needs to login to the domain to use OWA.  

Simon.
Hi!

I've just made the test with a user. I've deleted him from the Domain Users group and logged in into OWA (with the right permissions) and that seems to work just fine...

Michael
ASKER CERTIFIED SOLUTION
Avatar of Sembee
Sembee
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of rccomp

ASKER

I am glad I am not hacking away at the clients server.  Thanks for working this out for me guys.  It would be great if you could post the details when you have it solved.
Avatar of Jeffrey Kane - TechSoEasy
I don't understand why this is going through a "review" closing process rather than just being closed in the normal fashion.

Jeff
TechSoEasy
Avatar of rccomp

ASKER

Let me add that when I closed the question, I wanted to assign some of the points to the two different users.  Both provided solutions that were not complete.  I gave them 100 points each and left it that way as a partial credit for a partial solution.  

Now I don't know what to do.  It seems they want all the points for a partial solution.