Re: new Administrative Group or new Storage Group?

You could use Group Policy to lock machines down. You will have to apply it 
across all PCs to make sure they don't logon to a teacher's machine for 
example. I'd suggest you experiment but prohibiting interactive logon should 
take care of the biggest part of your problem. You cam also configure each 
account so that access is restricted to only OWA even if they do manage to 
get logged onto a machine.

Nue
"chrism" <chrism@no_spam> wrote in message 
news:%23DN0kG2JGHA.648@xxxxxxxxxxxxxxxxxxxxxxx
> since creating 1200 Active Directory accounts will cause a nightmare with 
> studennts logging on to library computers, I'd like to be able to restrict 
> their AD account to logon to any computers.  They will use OWA only and 
> use a generic 'library' user account to log on to those computers, and 
> then use their own account to logon to OWA.
>
> Is this possible ?
>
> thanks
>
> "Nuevo" <imaneophyte@xxxxxxxxx> wrote in message 
> news:%23ZwA7r1JGHA.3276@xxxxxxxxxxxxxxxxxxxxxxx
>> http://support.microsoft.com/kb/319213/en-us
>>
>> http://support.microsoft.com/kb/822940/en-us
>>
>> Both provide relevant information.
>>
>> Nue
>> "chrism" <chrism@no_spam> wrote in message 
>> news:O$r5To1JGHA.524@xxxxxxxxxxxxxxxxxxxxxxx
>>> thanks agan!  One more question:
>>>
>>> How can I make it so the student mailboxes will be displayed by default 
>>> in another address book called "Students" and not in the root of the 
>>> GAL?
>>>
>>> thx
>>>
>>>
>>>
>>> "Nuevo" <imaneophyte@xxxxxxxxx> wrote in message 
>>> news:%23wiwGj1JGHA.420@xxxxxxxxxxxxxxxxxxxxxxx
>>>> You would probably be best served by creating a script. If you're in 
>>>> K12 you could probably export from your Student records app and 
>>>> automate the creation of user accounts and mailboxes with a single 
>>>> script. If you are not into scripting or can't find one out there look 
>>>> into csvde or ldifde.
>>>>
>>>> Nue
>>>> "chrism" <chrism@no_spam> wrote in message 
>>>> news:%23$AB2f1JGHA.1088@xxxxxxxxxxxxxxxxxxxxxxx
>>>>> Thanks for the info.
>>>>>
>>>>> How can I automate the creation of the student mailboxes ?
>>>>>
>>>>> thx
>>>>>
>>>>>
>>>>> "Nuevo" <imaneophyte@xxxxxxxxx> wrote in message 
>>>>> news:%23ffiZW1JGHA.2040@xxxxxxxxxxxxxxxxxxxxxxx
>>>>>> Administrative Groups are logical groupings of servers for 
>>>>>> administrative purposes. You need to create a new storage group and 
>>>>>> as you suggest this will help give you more control.
>>>>>>
>>>>>> Nue
>>>>>>
>>>>>> "chrism" <chrism@no_spam> wrote in message 
>>>>>> news:%23RdJpP1JGHA.2668@xxxxxxxxxxxxxxxxxxxxxxx
>>>>>>> We have a school running one Exchange 2003 Enterprise server.
>>>>>>> There is the default Adminstrative Group which contains the 
>>>>>>> mailboxes for faculty/staff.
>>>>>>>
>>>>>>> We'd like to give students mailboxes.  Should I create a new 
>>>>>>> Adminstrative group for them, or a new Storage group?
>>>>>>>
>>>>>>> Which is recommended, which will give me more conrol, etc.
>>>>>>>
>>>>>>> It looks like I can't change the message size for just the student 
>>>>>>> mailboxes if I only create a Storage group.
>>>>>>>
>>>>>>> thanks
>>>>>>>
>>>>>>> chrism
>>>>>>>
>>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
> 


.

Relevant Pages

  • Re: User Account Lockout
    ... Workstation restriction; logon time restriction. ... Account disabled, expired, or locked out. ... Windows Small Business Server 2003 Technical Library ... *The script that runs, Is It a local script or a server script? ...
    (microsoft.public.windows.server.sbs)
  • Re: Using a wildcard in Drive Mapping
    ... can still do it with a logon file although it won't be a GUI. ... folder of the "All Users" profile folder with these lines inside: ... * Create an account JSmith. ... On the pseudoserver you create a share for each student. ...
    (microsoft.public.windowsxp.general)
  • Re: To prohibit users sharing the logins
    ... >> Is there a script would prohibit the user to share their logins? ... > The general idea is to create (throu logon script) folders on the server ... If the "intruder" has the account name and password, ... since the next logon is enabled by the running of the logoff ...
    (microsoft.public.windows.server.scripting)
  • Re: last account log on?
    ... I have a script that will list out the users last logon as well as multiple ... Select Active Directory User Account Attributes ... Last Logon Date ... (not sure whether it was resource kit or support tools) ...
    (microsoft.public.win2000.active_directory)
  • Re: new Administrative Group or new Storage Group?
    ... Student logon or something like ... where are the properties located for confiuring a user account to be ... >>> restrict their AD account to logon to any computers. ... How can I make it so the student mailboxes will be displayed by ...
    (microsoft.public.exchange.admin)