Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


How to disconnect active OWA sessions?

Posted on 2010-11-11
Medium Priority
Last Modified: 2012-05-10
Is there a way to immediately disable a users OWA session with Exchange 2007?
For example, if a remote user is terminated from the company but
has an active OWA session, how can you prevent them from being able to
continue working with this open OWA session? Can I cut off the session from
IIS?  IISRESET?  Has Anyone dealt with this before?

Scenario -  User gets terminated, I reset his PW, disable his AD account and move it into a disabled OU.  I then go into exchange and turn off OWA and other features of the users mailbox.  The user at this point is connected through RWW and logged into OWA.  1 hour after being terminated he's still sending emails to the company.

Question by:LifeFlight-IT
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
LVL 49

Accepted Solution

Akhater earned 2000 total points
ID: 34112430
iisreset will surely do it however I never had this requirement before

but I doubt that the change password will be immediate so he might be able to still log for some time (maybe a min or 2 if you have a small network)

how are you making owa accessible ? if you are using ISA or TMG then you can deny the users on the rule


Author Comment

ID: 34112551
I have never run into this either.  I've never had an IISRESET as part of an employee departure process.
The user was connected over Remote Web Workplace which basically gives him a link to webmail and intranet.
LVL 51

Expert Comment

by:Keith Alabaster
ID: 34113953
The user still has to get through your firewall - that would be the point to terminate the session connection rather than an iisReset which has a much bigger impact to all users rather than just this one.
Moving data to the cloud? Find out if you’re ready

Before moving to the cloud, it is important to carefully define your db needs, plan for the migration & understand prod. environment. This wp explains how to define what you need from a cloud provider, plan for the migration & what putting a cloud solution into practice entails.

LVL 49

Expert Comment

ID: 34118249
Do you have ISA or TMG or any other kind of firewall/reverse proxy that authenticates the user ?

Author Comment

ID: 34120889
I use Sonicwall TZ190.  The users come through RWW and authenticate through that, and not the FW.
LVL 49

Expert Comment

ID: 34120921
then I think there is no "smooth" way to do it


Author Comment

ID: 34120958
Since this termination was the exception and not the rule I think if it happens a again a quick IISRESET will do the trick.  I ran a test yesterday where I was logged into OWA, I disabled the users account, I then started to send email as this test user and all was working fine, I ran the IISRESET and then tried to send another email as the disabled user and "NO GO".  Once the web services came back online, the test user was forced to log in again and no go.  


Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Unified and professional email signatures help maintain a consistent company brand image to the outside world. This article shows how to create an email signature in Exchange Server 2010 using a transport rule and how to overcome native limitations …
A couple of months ago we ran into an issue that necessitated re-creating our Edge Subscriptions. However, when we attempted to execute the command: New-EdgeSubscription -filename C:\NewEdgeSub_01.xml we received an error indicating that the LDAP se…
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question