Link to home
Start Free TrialLog in
Avatar of Yashy
YashyFlag for United Kingdom of Great Britain and Northern Ireland

asked on

Disabling owa through group policy for specific users?

hey guys

any way of disabling OWA for groups of users on exchange 2007 using Group policies? I didn't want to manually disable it from the exchange management console. Any way of doing this with GP or some sort of add-in?

Thanks
Yashy
Avatar of waleeda
waleeda
Flag of Qatar image

you can create a new GPO and list the OWA URL as a restricted web site, and apply that GPO on those users
Avatar of Yashy

ASKER

thanks man.

is there a script of any kind that does this?
no need for script, because script will take time to run and it will slow the logon process, so better if you applied by group policy only, normally we are using the script if we dont have the option in the GPO settings
Avatar of GundogTrainer
GundogTrainer

Do you mean you want to prevent those account from being enabled on OWA by disabling the http\OWA protocol on the Exchange features tab of a user account.

I coundnt find it when I looked for my organisation so I have a script that Enables \ disables it based on membership of an AD group. Happy to post it for you if you cant do it via GPO.
Avatar of Yashy

ASKER

Yes GundogTrainer, that's what I wanted. To prevent the account from being enabled on OWA is what I want to stop them being able to use OWA. Will your script do that?

Although waleeda is mentioning that it will slow down things?

Many thanks.
Avatar of Yashy

ASKER

Yes, the script would be great if you could post that. Much appreciate it.
Can you have a look at this previous post as the script I am using at the moment is for the mobile services not the OWA protocol - my bad !
https://www.experts-exchange.com/questions/26617753/Script-that-can-get-to-a-user's-protocolsettings-and-remove-the-mapi-from-it-I-want-to-query-every-user-in-a-OU-and-do-this-one-after-the-other.html

I can merge it with my script in the morning so it would disable based on group membership.
the GPO better than the script
because the feature already there and the script will slow down the logon process
ASKER CERTIFIED SOLUTION
Avatar of GundogTrainer
GundogTrainer

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Typical I found a microsoft article that shows a method of restricting access to OWA based upon the user having a specific email domain - specified by a reciepient policy, and a new HTTP virtual server.

I would have prefered to have read this article before fixing the vbscript....
http://support.microsoft.com/kb/830827