|
|
 FAQ
 Search
 Memberlist
 Usergroups
 Register
 Profile
 Private messages
 Log in
|
|
| Author |
Message |
Hindrik
Guest
|
 Posted: Thu May 11, 2006 11:48 am Post subject: Rights in AD |
 |
|
Hello.
I have a little problem.
I want to add some user's to the ad only with e-mail right, so no domain
right what so ever.
We will have to put it in the ad because off the sync for the antivirus
appliance.
What is the best way to put this together?
Hindrik
p.s. sorry for the english |
|
| Back to top |
|
 |
|
|
Paul Bergson
Guest
|
| Posted: Thu May 11, 2006 4:52 pm Post subject: Re: Rights in AD |
|
|
If you are using Exchange 2000 or beyond they have to have the ability to
logon to the domain to gain access to their mailbox. So with that said they
have to have at least the minimum rights to logon. You could place them in
a special ou and apply a gpo against this ou to severaly restrict
permissions and even place a script in the logon script to log them off if
they logon. Then if the users want to gain access to their e-mail they will
have to use a web browser and OWA. We have some external users that we do
just this.
--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
http://www.pbbergs.com
Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.
"Hindrik" <Hindrik@discussions.microsoft.com> wrote in message
news:1CB2F514-A56C-4598-94C5-E2EDDFC8B011@microsoft.com...
| Quote: | Hello.
I have a little problem.
I want to add some user's to the ad only with e-mail right, so no domain
right what so ever.
We will have to put it in the ad because off the sync for the antivirus
appliance.
What is the best way to put this together?
Hindrik
p.s. sorry for the english |
|
|
| Back to top |
|
|
Hindrik
Guest
|
| Posted: Thu May 11, 2006 5:41 pm Post subject: Re: Rights in AD |
|
|
Ok, but we don't have exchange or some thing like that we are thinking about
it but we would like to have this in Windows 2003 Server Standard.
But you said that it would work if we restrict the rights of te pop3 user to
a minimum.
Or are there a way's to do so?
With kind regards,
Hindrik
"Paul Bergson" schreef:
| Quote: | If you are using Exchange 2000 or beyond they have to have the ability to
logon to the domain to gain access to their mailbox. So with that said they
have to have at least the minimum rights to logon. You could place them in
a special ou and apply a gpo against this ou to severaly restrict
permissions and even place a script in the logon script to log them off if
they logon. Then if the users want to gain access to their e-mail they will
have to use a web browser and OWA. We have some external users that we do
just this.
--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
http://www.pbbergs.com
Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.
"Hindrik" <Hindrik@discussions.microsoft.com> wrote in message
news:1CB2F514-A56C-4598-94C5-E2EDDFC8B011@microsoft.com...
Hello.
I have a little problem.
I want to add some user's to the ad only with e-mail right, so no domain
right what so ever.
We will have to put it in the ad because off the sync for the antivirus
appliance.
What is the best way to put this together?
Hindrik
p.s. sorry for the english
|
|
|
| Back to top |
|
|
Paul Bergson
Guest
|
| Posted: Fri May 12, 2006 5:07 pm Post subject: Re: Rights in AD |
|
|
I'm confused? I'm unclear as to your question or the environment you are
using.
--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
http://www.pbbergs.com
Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.
"Hindrik" <Hindrik@discussions.microsoft.com> wrote in message
news:7EE1E3B9-C43B-4E63-B174-E4C3E5F41DDA@microsoft.com...
| Quote: | Ok, but we don't have exchange or some thing like that we are thinking
about
it but we would like to have this in Windows 2003 Server Standard.
But you said that it would work if we restrict the rights of te pop3 user
to
a minimum.
Or are there a way's to do so?
With kind regards,
Hindrik
"Paul Bergson" schreef:
If you are using Exchange 2000 or beyond they have to have the ability to
logon to the domain to gain access to their mailbox. So with that said
they
have to have at least the minimum rights to logon. You could place them
in
a special ou and apply a gpo against this ou to severaly restrict
permissions and even place a script in the logon script to log them off
if
they logon. Then if the users want to gain access to their e-mail they
will
have to use a web browser and OWA. We have some external users that we
do
just this.
--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
http://www.pbbergs.com
Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no
rights.
"Hindrik" <Hindrik@discussions.microsoft.com> wrote in message
news:1CB2F514-A56C-4598-94C5-E2EDDFC8B011@microsoft.com...
Hello.
I have a little problem.
I want to add some user's to the ad only with e-mail right, so no
domain
right what so ever.
We will have to put it in the ad because off the sync for the antivirus
appliance.
What is the best way to put this together?
Hindrik
p.s. sorry for the english
|
|
|
| Back to top |
|
|
|
|
