Re: How to add a user with very limited rights



Hi Steve,

Thanks for your update! I am glad to hear that information is helpful for
you.

The Windows Server 2003 External Connector (EC) license is an optional
licensing alternative to address a specific customer scenario.

An EC license is not applicable to Web Edition or Windows Small Business
Server. And it can be acquired for servers running Windows Server 2003
Standard, Enterprise, or Datacenter Editions.

For more information about External Connector License, please refer to the
following link:

External Connector License Overview
http://www.microsoft.com/windowsserver2003/howtobuy/licensing/extconnector.m
spx

For further licensing questions, you can call 1-800-426-9400 (select option
4), Monday through Friday, 6:00 A.M. to 6:00 P.M. (PST) to speak directly
to a Microsoft licensing specialist. Worldwide customers can use the Guide
to Worldwide Microsoft Licensing Sites
http://www.microsoft.com/licensing/index/worldwide.asp to find contact
information in their locations.

Hope above information helps! I am happy to be assistance of you!

Have a nice day!

Best Regards,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>From: "Steve" <nospam@xxxxxxxxxx>
>References: <udu4LcqzFHA.908@xxxxxxxxxxxxxxxxxxxx>
<pSj0B6wzFHA.668@xxxxxxxxxxxxxxxxxxxxx>
>Subject: Re: How to add a user with very limited rights
>Date: Wed, 12 Oct 2005 09:29:44 -0700
>Lines: 181
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
>X-RFC2646: Format=Flowed; Original
>Message-ID: <OgUboo0zFHA.4032@xxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: mail.bayareafirststep.org 68.185.19.58
>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP1
5.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:212309
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Thank you!
>
>That is very helpful.
>
>Can you tell me if this would work for Windows Small Business 2003?
>
>Windows Server External Connector License (Includes Software Assurance)
This
>is an External Connector License for Windows 2003 Server Standard and
>Windows 2003 Server Enterprise. If your organization has a large number of
>authenticated external internet users accessing the Windows 2003 Server or
>utilizing Window's Services, an Internet Connector License will allow an
>unlimited number of such connections. If your organization only expects a
>small number of concurrent such users, then purchasing a number of CAL's
for
>the maximum simultaneous users expected might be a more economical
solution.
>Please note that an organization with an External Connector license still
>has to purchase CALs for the internal devices accessing the server.
>Anonymous internet users do not require CALs.
>""Jenny wu [MSFT]"" <v-yanniw@xxxxxxxxxxxxxxxxxxxx> wrote in message
>news:pSj0B6wzFHA.668@xxxxxxxxxxxxxxxxxxxxxxxx
>> Hi Steve,
>>
>> Thanks for posting here!
>>
>> For our description, I understand that you want to know how to limit
>> domain
>> user permissions. If I am off base, please don't hesitate to let me know.
>>
>> There are some methods can meet your needs, the principle is the similar,
>> and you can refer the following steps to do:
>>
>> 1. Open Server Management console, expend Users node and click Add a User
>> link to launch add user wizard.
>> 2. Follow the guide, input User name and others information in User
>> Account
>> Information page. Note: delete Email Alias information and then click
>> Next.
>> You will get prompt message this time to ask if you don't want to create
>> mailbox for the user, click Yes to continue process.
>> 3. You can choose item of "Do not use a template to define user settings"
>> in Template Selection page to avoid the user inherits any permissions you
>> don't want to. And then click Next, add the user to Security group: Users
>> and any appropriate distribution group you created in Group Selection
>> page.
>> 4. Give the user appropriate Sharepoint Access permission in Sharepoint
>> Access page and then click Next.
>> 5. Follow the guide, change the Disk Quota to 1 (minimum number) and then
>> follow wizard to create the new user account.
>> 6. Double click the user account to open it properties page, click Member
>> of tab to ensure the Remote Web Workspace Users group is not listed here.
>> Or delete it directly. Note: if you want the user has some group
>> permission, you can add it here. And opposite you can delete it.
>>
>> You can create group policy to control respectively users Document
>> redirections policy.
>>
>> To create a Group Policy Object, please follow these steps:
>> 1. Click Start, point to Administrative Tools, and then click Active
>> Directory Users and Computers.
>> 2. Right-click the domain and then click Properties.
>> 3. Click the Group Policy tab, and then click New.
>> 4. Type the name that you want to use for this policy (for example,
>> ShopUsers policy), and then press ENTER.
>> 5. Click Properties, and then click the Security tab.
>> 6. Click to clear the Allow check box next to Apply Group Policy for the
>> security groups that you want to prevent from having this policy applied.
>> 7. Click to select the Allow check box next to Apply Group Policy for the
>> groups to which you want to apply this policy, and then click OK.
>> 8. Click OK, click OK again, and then quit Active Directory Users and
>> Computers.
>>
>> One thing you need to clarify, if these persons need to access Companyweb
>> site from internet, you need to publish WSS to internet.
>>
>> You need run CEICW wizard and ensure check the box of Windows Sharepoint
>> Services intranet site in Web Services Configuration page to allow access
>> Sharepoint service from internet. If you installed IAS 2000, you need to
>> refer to the following KB article to publish the Companyweb site:
>>
>> 313072 HOW TO:Configure the Web Publishing Service to Work with Internet
>> http://support.microsoft.com/?id=313072
>>
>> Please ensure you open the inbound and outbound 444 port and 443 port
>> redirection on the hardware router or firewall. Check the manufacturer's
>> documentation for details on how to open ports of the device.
>> ===================
>> For your reference:
>> 825763 How to configure Internet access in Windows Small Business Server
>> 2003
>> http://support.microsoft.com/?id=825763
>>
>> In addition, I would like to mention that the following ports should be
>> opened on the hardware router/firewall if you want to use follow
>> applications:
>> TCP 25 This port is used for incoming SMTP traffic. If you are using POP3
>> connector, there is no need to open this port.
>> TCP 110 This port is used for POP3 mail clients.
>> TCP 443 SSL
>> TCP 444 Companyweb SSL
>> TCP 4125 Remote Web Workplace
>> TCP 3389 Terminal services
>> ===================
>>
>> Hope above information helps! If you have any further concern or question
>> on the issue please feel free to let me know. I am always happy to be
>> assistance of you and look forward to your reply!
>>
>> Have a nice day!
>>
>> Best Regards,
>>
>> Jenny Wu
>> Microsoft CSS Online Newsgroup Support
>> Get Secure! - www.microsoft.com/security
>> ======================================================
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
corresponding
>> newsgroups so that they can be resolved in an efficient and timely
manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
>> the
>> "Notify me of replies" box to receive e-mail notifications when there are
>> any updates in your thread. When responding to posts via your newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
>> doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly. Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> ======================================================
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> --------------------
>>>From: "Steve" <nospam@xxxxxxxxxx>
>>>Subject: How to add a user with very limited rights
>>>Date: Tue, 11 Oct 2005 14:02:08 -0700
>>>Lines: 14
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <udu4LcqzFHA.908@xxxxxxxxxxxxxxxxxxxx>
>>>Newsgroups: microsoft.public.windows.server.sbs
>>>NNTP-Posting-Host: mail.bayareafirststep.org 68.185.19.58
>>>Path:
>>
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp1
>> 3.phx.gbl
>>>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:212066
>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>
>>>I have Windows SBS 2003. I have setup a special windows sharepoint
>> subsite
>>>under companyweb. I want to let a few certain people outside of my
>> company
>>>to have access to it.
>>>
>>>I have plenty of CAL's and I would like to setup some users that
basically
>>>only have access to the site. Can someone tell me the steps to create a
>>>user or template that doesn't have an exchange account, disk space
>> quota's,
>>>document redirection, access through RWW. I just want to be able to add
>>>these users to the SharePoint site.
>>>
>>>Thanks in advance.
>>>Steve
>>>
>>>
>>>
>>
>
>
>

.



Relevant Pages

  • RE: RWW problem on one Client machine
    ... Welcome to SBS newsgroup. ... services licensing service on a Windows 2000 domain controller. ... terminal license successfully. ... messages in the event log saying that "A terminal license server cannot be ...
    (microsoft.public.windows.server.sbs)
  • Re: Anonymous connections.
    ... Windows Server 2003 Licensing Server can control ... you may use the New External Connector License option. ... Microsoft Partner Support ...
    (microsoft.public.windows.terminal_services)
  • Re: Connecting to SQL Without Windows Authentication
    ... This is why the "license group" concept was introduced - to account ... Also note that you not only need SQL CALs but also Windows CALs in case the ... > Domain and our Windows 2000 server in another domain. ...
    (microsoft.public.sqlserver.security)
  • Re: [SLE] Microsoft Terminal Server access from SuSE 9.3
    ... >> problem by logging on locally and checking the event logs for license ... > Just my friend came to visit me and with his laptop with Windows XP I ... > connected with RDC to my server with my name and passw without trouble...? ... get 2 TSCALs for access, for remote admin only of course. ...
    (SuSE)
  • RE: RWW problem on one Client machine
    ... I think we are looking for something on his client. ... > services licensing service on a Windows 2000 domain controller. ... > terminal license successfully. ... > messages in the event log saying that "A terminal license server cannot be ...
    (microsoft.public.windows.server.sbs)