Re: Russ Grover & Dave Nickason - RPC over HTTP and Outlook Con't

Tech-Archive recommends: Fix windows errors by optimizing your registry

Thanks for your help guys i really appreciate it.

I am a little confused - i understand what you mean however, can i
still grant full access rights to the staff members, but still have
the profile set as opening the Info/Sales mailboxes? - i.e. it is
still opening the info mailbox, in outlook but when it prompts for
username/password, i can now use any staff members username/password?

Thanks

On Jul 8, 11:14 pm, "Steve Foster [SBS MVP]"
<steve.fos...@xxxxxxxxxxxxx> wrote:
bob.smith.0...@xxxxxxxxx wrote:
Hey Guys,

Thanks for your help. I took heed to your advice and made a new post -
only talk about one of the issues before.

Its about using the info and sales accounts as secondary mailboxes. I
have already been using this method. However, whats been happening is
that the staff now have access to the passwords etc for the logons -
i.e. they can now access the email remotely using OWA because they
need the passwords for logon to their workstations Outlook clients.
This is a security risk and we want to stop it. Therefore, we are
wondering if we can somehow enable the staff to use their OWN CAL
logons for the domain, and when they open outlook, they can open the
profile just under the info account (because we are a small business,
the staff do not use their own email addresses on the internal
domain).

If you grant rights to the Info/Sales mailboxes to the other users, they
won't need to logon to the Sales/Info mailbox at all.

The drawbacks are:

* they will need to show the From header when composing new mail so that
they can pick the Sales/Info address, and
* the sent message will go into their own Sent Items, and need moving to
the Sales/Info Sent Items (if that matters to you).

Another option is that you can configure the Sales/Info accounts to not
have access to OWA - it's an account property.

For example: Robert has a logon of Domain\Robert, for his CAL. We want
him to be able to go into Outlook, to open the default profile which
is linked to the info account, but when it asks for the password for
the info account, he can use his Domain\Robert CAL logon instead of
the Domain\info CAL logon details.

The account that a user logons to the server with is irrelevant for CAL
purposes. Robert has the CAL, not his user account (assuming User CALs).

--
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.- Hide quoted text -

- Show quoted text -


.

Relevant Pages

  • Re: Russ Grover & Dave Nickason - RPC over HTTP and Outlook Cont
    ... need the passwords for logon to their workstations Outlook clients. ... won't need to logon to the Sales/Info mailbox at all. ... Another option is that you can configure the Sales/Info accounts to not have access to OWA - it's an account property. ... not his user account (assuming User CALs). ...
    (microsoft.public.windows.server.sbs)
  • What happened to me when Whitey Bulger took off
    ... In 1994 a local Woburn Mass. ... Whitey Bulger left town as Steve Flemmi was arrested. ... as reported by hospital staff. ... my account to bounce checks, and never did anything to the teller nor ...
    (alt.true-crime)
  • Re: User CALs
    ... I have a site where all 'normal' staff sign on using the userID 'staff', ... SBS CALs are great value. ... and the licence usage should be calculated as ONE licence ...
    (microsoft.public.windows.server.sbs)
  • Re: Administrators security training
    ... topic will make your staff aware who should be communicated and how ... the importance of good and timely documentation. ... General responsibilities as an admin (privileged access, become familiar with security controls, stronger requirements for account passwords and expirations, point out application weaknesses and suggest ways to mitigate) ... How to perform entitlement reviews(identify users and "need to know", periodic review of users, minimize number of admin users, etc) ...
    (Security-Basics)
  • Automated Email error
    ... Hi I have an outlook express account that is used by couple of staff. ... display name when name is set as "SiteCustomer Help"? ...
    (microsoft.public.outlook.general)