Re: new Administrative Group or new Storage Group?

You could modify the default domain policy but it would probably be better 
to copy that policy and create a new called. Student logon or something like 
that. The standard Gps should have a computer and user configuration. Make 
sure you are using GPMC as this makes GPs easier to work with.

Nue

"chrism" <chrism@no_spam> wrote in message 
news:Oo8prQ2JGHA.648@xxxxxxxxxxxxxxxxxxxxxxx
> would you happen to know where this GPO is located?
> I can only find one for the Computer Configuration, which would present a 
> problem with implementation.
>
> Also, where are the properties located for confiuring a user account to be 
> able to only use OWA.
>
> Sorry for all the questions but I just inheritied this environment and do 
> not know much about Exchange at thsi point.
>
> thanks again for your excellent help !
>
> "Nuevo" <imaneophyte@xxxxxxxxx> wrote in message 
> news:ebDdqJ2JGHA.648@xxxxxxxxxxxxxxxxxxxxxxx
>> You could use Group Policy to lock machines down. You will have to apply 
>> it across all PCs to make sure they don't logon to a teacher's machine 
>> for example. I'd suggest you experiment but prohibiting interactive logon 
>> should take care of the biggest part of your problem. You cam also 
>> configure each account so that access is restricted to only OWA even if 
>> they do manage to get logged onto a machine.
>>
>> Nue
>> "chrism" <chrism@no_spam> wrote in message 
>> news:%23DN0kG2JGHA.648@xxxxxxxxxxxxxxxxxxxxxxx
>>> since creating 1200 Active Directory accounts will cause a nightmare 
>>> with studennts logging on to library computers, I'd like to be able to 
>>> restrict their AD account to logon to any computers.  They will use OWA 
>>> only and use a generic 'library' user account to log on to those 
>>> computers, and then use their own account to logon to OWA.
>>>
>>> Is this possible ?
>>>
>>> thanks
>>>
>>> "Nuevo" <imaneophyte@xxxxxxxxx> wrote in message 
>>> news:%23ZwA7r1JGHA.3276@xxxxxxxxxxxxxxxxxxxxxxx
>>>> http://support.microsoft.com/kb/319213/en-us
>>>>
>>>> http://support.microsoft.com/kb/822940/en-us
>>>>
>>>> Both provide relevant information.
>>>>
>>>> Nue
>>>> "chrism" <chrism@no_spam> wrote in message 
>>>> news:O$r5To1JGHA.524@xxxxxxxxxxxxxxxxxxxxxxx
>>>>> thanks agan!  One more question:
>>>>>
>>>>> How can I make it so the student mailboxes will be displayed by 
>>>>> default in another address book called "Students" and not in the root 
>>>>> of the GAL?
>>>>>
>>>>> thx
>>>>>
>>>>>
>>>>>
>>>>> "Nuevo" <imaneophyte@xxxxxxxxx> wrote in message 
>>>>> news:%23wiwGj1JGHA.420@xxxxxxxxxxxxxxxxxxxxxxx
>>>>>> You would probably be best served by creating a script. If you're in 
>>>>>> K12 you could probably export from your Student records app and 
>>>>>> automate the creation of user accounts and mailboxes with a single 
>>>>>> script. If you are not into scripting or can't find one out there 
>>>>>> look into csvde or ldifde.
>>>>>>
>>>>>> Nue
>>>>>> "chrism" <chrism@no_spam> wrote in message 
>>>>>> news:%23$AB2f1JGHA.1088@xxxxxxxxxxxxxxxxxxxxxxx
>>>>>>> Thanks for the info.
>>>>>>>
>>>>>>> How can I automate the creation of the student mailboxes ?
>>>>>>>
>>>>>>> thx
>>>>>>>
>>>>>>>
>>>>>>> "Nuevo" <imaneophyte@xxxxxxxxx> wrote in message 
>>>>>>> news:%23ffiZW1JGHA.2040@xxxxxxxxxxxxxxxxxxxxxxx
>>>>>>>> Administrative Groups are logical groupings of servers for 
>>>>>>>> administrative purposes. You need to create a new storage group and 
>>>>>>>> as you suggest this will help give you more control.
>>>>>>>>
>>>>>>>> Nue
>>>>>>>>
>>>>>>>> "chrism" <chrism@no_spam> wrote in message 
>>>>>>>> news:%23RdJpP1JGHA.2668@xxxxxxxxxxxxxxxxxxxxxxx
>>>>>>>>> We have a school running one Exchange 2003 Enterprise server.
>>>>>>>>> There is the default Adminstrative Group which contains the 
>>>>>>>>> mailboxes for faculty/staff.
>>>>>>>>>
>>>>>>>>> We'd like to give students mailboxes.  Should I create a new 
>>>>>>>>> Adminstrative group for them, or a new Storage group?
>>>>>>>>>
>>>>>>>>> Which is recommended, which will give me more conrol, etc.
>>>>>>>>>
>>>>>>>>> It looks like I can't change the message size for just the student 
>>>>>>>>> mailboxes if I only create a Storage group.
>>>>>>>>>
>>>>>>>>> thanks
>>>>>>>>>
>>>>>>>>> chrism
>>>>>>>>>
>>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
> 


.

Relevant Pages

  • XP Logon nightmare
    ... I am having the exact same error message. ... Logon failure: user account restriction. ... Not only are the other four computers are still able to access the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: new Administrative Group or new Storage Group?
    ... I'd suggest you experiment but prohibiting interactive logon should ... > their AD account to logon to any computers. ... >>> How can I make it so the student mailboxes will be displayed by default ... You would probably be best served by creating a script. ...
    (microsoft.public.exchange.admin)
  • Re: Using a wildcard in Drive Mapping
    ... can still do it with a logon file although it won't be a GUI. ... folder of the "All Users" profile folder with these lines inside: ... * Create an account JSmith. ... On the pseudoserver you create a share for each student. ...
    (microsoft.public.windowsxp.general)
  • Re: new Administrative Group or new Storage Group?
    ... where are the properties located for confiuring a user account to be ... able to only use OWA. ... I'd suggest you experiment but prohibiting interactive logon ... >> restrict their AD account to logon to any computers. ...
    (microsoft.public.exchange.admin)
  • Re: new Administrative Group or new Storage Group?
    ... studennts logging on to library computers, I'd like to be able to restrict ... their AD account to logon to any computers. ... >>> you could probably export from your Student records app and automate the ...
    (microsoft.public.exchange.admin)