<div>
What I use to do for similar situations.<br />
Create a new group say NoGroups add the user. &nbsp;Set that as the user default group as NoGroups. &nbsp;Then remove them from Domain Users. &nbsp;Depending on how your shares are setup this should effectively remove them from any network resource. &nbsp;Unless of course you need to be in Domain Users for OWA. 
</div>


<div>
<div class="content wysiwyg-content">
I have a user how is a domain user but I need to be able to apply a deny to all shares on the network but still be able to use OWA. &nbsp;I know the long way to to add this user in all shares and put deny but as there is a lot of shares to do I wounder if there was a quicker way of dealing with this. &nbsp;The user will be on the domain for email only nothing else
</div>
</div>


I have a user how is a domain user but I need to be able to apply a deny to all shares on the network but still be able to use OWA.  I know the long way to to add this user in all shares and put deny but as there is a lot of shares to do I wounder if there was a quicker way of dealing with this.  The user will be on the domain for email only nothing else

What I use to do for similar situations.
Create a new group say NoGroups add the user.  Set that as the user default group as NoGroups.  Then remove them from Domain Users.  Depending on how your shares are setup this should effectively remove them from any network resource.  Unless of course you need to be in Domain Users for OWA. 

How to deny a Domain User from ALL Shares

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

The Microsoft Server topic includes all of the legacy versions of the operating system, including the Windows NT 3.1, NT 3.5, NT 4.0 and Windows 2000 and Windows Home Server versions.

Microsoft Server OS

Microsoft Forefront, formerly known as Internet Security and Acceleration Server (ISA Server), is a network router, firewall, antivirus program, VPN server and web cache that runs on Windows servers. It includes identity management and protection systems, and discontinued systems for threat management and network protection, along with protection for Sharepoint and Exchange. The scope of discussions includes forward and reverse proxy, application and service publishing, virtual private networks (VPNs), outbound access rules, SSL certificates and network routing within either a single node or an highly-available array pairing.