We help IT Professionals succeed at work.

Webmail Only

I'm trying to figure out if there's a way to allow ONLY access to webmail for an AD user? I don't want this person to be able to log into any workstations.
Comment
Watch Question

Lee W, MVPTechnology and Business Process Advisor
CERTIFIED EXPERT
Most Valuable Expert 2013

Commented:
All things being equal, just remove the user from the domain users group and they can't log in to workstations.
D HService Manager

Author

Commented:
Thats what i thought, but I added to Domain Guests (you cannot remove domain users as its the primary group) in order to have the user as a part of a group.
Technology and Business Process Advisor
CERTIFIED EXPERT
Most Valuable Expert 2013
Commented:
You CAN remove from domain users if you change the primary group.  Create a group, "non-workstation users" and set that as the primary group. Then remove from domain users
D HService Manager

Author

Commented:
Thanks for the confirmation

Explore More ContentExplore courses, solutions, and other research materials related to this topic.