Re: Putting Users in Groups

Hello John,

Thank you for your clarification.

Based on your description, I believe the b) group only need to be the
member of Domain Users.

And the C) group need to be the member of Domain Users group and Remote Web
Workplace Users group.

If you have any further questions, please let me know.

Best regards,

Manfred Zhuang(MSFT)
Microsoft Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| NNTP-Posting-Date: Tue, 30 Oct 2007 12:21:37 -0500
| From: John F Kappler <john@xxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Re: Putting Users in Groups
| Date: Tue, 30 Oct 2007 17:21:18 +0000
| Message-ID: <kfpei35jbkvg3qv39pr7lk21v1j231toam@xxxxxxx>
| References: <duqbi3l3k9mi6rjabar646oninlsg508ds@xxxxxxx>
<TxZiBMtGIHA.5204@xxxxxxxxxxxxxxxxxxxxxx>
| X-Newsreader: Forte Free Agent 1.93/32.576 English (American)
| MIME-Version: 1.0
| Content-Type: text/plain; charset=us-ascii
| Content-Transfer-Encoding: 7bit
| Lines: 141
| X-Usenet-Provider: http://www.giganews.com
| NNTP-Posting-Host: 62.3.245.66
| X-Trace:
sv3-bbhLvhhRNj25Oq7PQEZMb8e/e9oFfVbc7kEMYrCDIBOda0N495KpYbsjHFWX8q4shQ7I/ub9
qt07VNJ!Omzw2HjPmNAlwlvloS6mqnbX26PKl0b6YBBRnRVyJzL6fktFKLA6hc1GZdlSUU4rPXcl
sSfIvDY4!JGV2zlXUWRVgRsTPdag=
| X-Complaints-To: abuse@xxxxxxxxxxxxx
| X-DMCA-Complaints-To: abuse@xxxxxxxxxxxxx
| X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
| X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your
complaint properly
| X-Postfilter: 1.3.35
| Bytes: 7085
| X-Original-Bytes: 7042
| Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!newsfeed0
0.sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!border1.nntp.dca
..giganews.com!nntp.giganews.com!local01.nntp.dca.giganews.com!nntp.pipex.net
!news.pipex.net.POSTED!not-for-mail
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:72713
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Thanks. My clarifications below. Still dont think I quite have the
| answers!
| On Tue, 30 Oct 2007 08:58:10 GMT, v-mzhuan@xxxxxxxxxxxxxxxxxxxx
| (Manfred Zhuang [MSFT]) wrote:
|
| >Hello John,
| >
| >Thank you for posting here.
| >
| >In answer to your questions:
| >
| >1. You are right. <localdomainname> distribution group is used in
Exchange.
| >When users send emails to <localdomainname> distribution group, all the
| >members receive the emails.
| >
| >2. Yes, a) should be the member of 1,2,3.
| Good
| >
| >3. I am not sure what do you mean remote users. If the users connect to
the
| >server by VPN or dial in, they should be the member of Domain Users,
mobile
| >users. If ISA server is installed, they also should be the member of
| >Internet Users.
| ISA Not installed. These users only access the intranet. They connect
| from browser using https://<domain>:444 They do nothing else (no RWW,
| No OWA and aren't Exchange or Domain Users. I'd like to remove these
| users from any groups that aren't appropriate to their requirement!
| >
| >However, if I misunderstand you, please let me know.
| >
| >4. I think group c) need 1), 2). In addition, if the remote users
connect
| >to the server by VPN or dial in, they should be the member of Mobile
Users
| >group and Internet Users group (If ISA server is installed.)
| ISA not installed. They aren't Mobile Users and do not connect via
| either VPN or dial-in. All they use is browser and
| https://<domain>/remote and then choose to connect to the application
| server. They do not require any other form of access (at this time!).
| >
| >If anything is unclear, please feel free to let me know.
| >
| >Best regards,
| >
| >Manfred Zhuang(MSFT)
| >Microsoft Online Newsgroup Support
| >
| >Get Secure! - www.microsoft.com/security
| >
| >=====================================================
| >This newsgroup only focuses on SBS technical issues. If you have issues
| >regarding other Microsoft products, you'd better post in the
corresponding
| >newsgroups so that they can be resolved in an efficient and timely
manner.
| >You can locate the newsgroup here:
| >http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| >When opening a new thread via the web interface, we recommend you check
the
| >"Notify me of replies" box to receive e-mail notifications when there
are
| >any updates in your thread. When responding to posts via your
newsreader,
| >please "Reply to Group" so that others may learn and benefit from your
| >issue.
| >
| >Microsoft engineers can only focus on one issue per thread. Although we
| >provide other information for your reference, we recommend you post
| >different incidents in different threads to keep the thread clean. In
doing
| >so, it will ensure your issues are resolved in a timely manner.
| >
| >For urgent issues, you may want to contact Microsoft CSS directly.
Please
| >check http://support.microsoft.com for regional support phone numbers.
| >
| >Any input or comments in this thread are highly appreciated.
| >=====================================================
| >
| >This posting is provided "AS IS" with no warranties, and confers no
rights.
| >--------------------
| >| NNTP-Posting-Date: Mon, 29 Oct 2007 09:30:04 -0500
| >| From: John F Kappler <john@xxxxxxxxxxxxxx>
| >| Newsgroups: microsoft.public.windows.server.sbs
| >| Subject: Putting Users in Groups
| >| Date: Mon, 29 Oct 2007 14:29:47 +0000
| >| Message-ID: <duqbi3l3k9mi6rjabar646oninlsg508ds@xxxxxxx>
| >| X-Newsreader: Forte Free Agent 1.93/32.576 English (American)
| >| MIME-Version: 1.0
| >| Content-Type: text/plain; charset=us-ascii
| >| Content-Transfer-Encoding: 7bit
| >| Lines: 37
| >| X-Usenet-Provider: http://www.giganews.com
| >| NNTP-Posting-Host: 62.3.232.244
| >| X-Trace:
|
sv3-NjAcltMWwDy3cjjAgyx8cwkTa3Gk/bk+tCOlzIM3h8OmJ71dmdGaMS4G0EffWf8cpp7X4s/
b
|
eErYqS8!XK13wOLuFCYlMGpZXe9EXmz7yUquIP3Jx3FOzNAw+vE2NyJDDMrMbVQlw4Nl6qMYjnJ
1
| >1fMOZ0AV!zCcQNVZ6ZXn/ixyoowGK
| >| X-Complaints-To: abuse@xxxxxxxxxxxxx
| >| X-DMCA-Complaints-To: abuse@xxxxxxxxxxxxx
| >| X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
| >| X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your
| >complaint properly
| >| X-Postfilter: 1.3.35
| >| Path:
|
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!msrtrans
!
|
msrn-in!newshub.sdsu.edu!border1.nntp.dca.giganews.com!nntp.giganews.com!lo
c
|
al01.nntp.dca.giganews.com!nntp.pipex.net!news.pipex.net.POSTED!not-for-mai
l
| >| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:72416
| >| X-Tomcat-NG: microsoft.public.windows.server.sbs
| >|
| >| Following on from recent discussions I'm trying to put users into the
| >| correct security groups ......
| >|
| >| In reviewing our currently set up users, they all (apart from the
| >| Administrator) appear to be members of the following three groups:
| >|
| >| 1) Domain Users
| >| 2) Remote Web Workplace Users
| >| 3) <localdomainname>
| >|
| >| In fact, our users fall broadly into three groups:
| >|
| >| a) Local users (both static and mobile) who also require OWA
| >| b) Remote Users who only require Intranet Access
| >| c) Remote Users who require Application access via Terminal Services
| >| (and RWW)
| >|
| >| I'm not sure what 3) is! Documentation says its to do with
| >| Distribution Groups. Does this mean its about appearing in an Address
| >| Book?
| >|
| >| I assume it is correct for a) to have all of 1), 2) and 3) ?
| >|
| >| I'm unclear what group b) need to just get to our Intranet ?
| >|
| >| I gues its obvious group c) need 2) - but do they need 1) and 3) if
| >| their only requirement is to TS to the application ?
| >|
| >| I've printed out various help files and Security Groups listings but
| >| am finding it difficult to correlate the various lists, so any help
| >| appreciated!
| >|
| >| TIA,
| >|
| >| JohnK
| >|
| >|
| >|
|
|

.

Relevant Pages

  • RE: New SBS server has disappearing security settings for user in
    ... controller it was setup this way and replicated to the new server. ... following groups and all of the member objects of these groups: ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: domain users have no access to outlook/outlook express
    ... Microsoft CSS Online Newsgroup Support ... When opening a new thread via the web interface, we recommend you check the ... domain users have no access to outlook/outlook express ...
    (microsoft.public.windows.server.sbs)
  • RE: New SBS server has disappearing security settings for user in
    ... thank you for using Microsoft newsgroup. ... | I think that I found the culprit - the Print Operators group is a member ... |> To resolve this issue, please remove these users from the above groups. ...
    (microsoft.public.windows.server.sbs)
  • Re: Putting Users in Groups
    ... Yes, a) should be the member of 1,2,3. ... server by VPN or dial in, they should be the member of Domain Users, mobile ... Microsoft Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Domain users cannot view "companyweb"
    ... none of the domain users were on the list. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)