[isapros] Re: Exch permissions Q

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: <isapros@xxxxxxxxxxxxx>
  • Date: Mon, 17 Jul 2006 20:19:50 -0500

Ha! Talk about a creative way of controlling access to OWA ;)

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls

 

> -----Original Message-----
> From: isapros-bounce@xxxxxxxxxxxxx 
> [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
> Sent: Monday, July 17, 2006 8:18 PM
> To: isapros@xxxxxxxxxxxxx
> Subject: [isapros] Re: Exch permissions Q
> 
> Got it.
> I had limited her machine logon rights to one machine.
> Once I gave her "all machines", she could get her mail.
> 
> I guess this also stops impersonation <sigh>.
> 
> Jim Harrison
> jim@xxxxxxxxxxxx
> www.isatools.org
> 
> Sent  using Vista Beta 2 and Office 12 Beta 2 (aincha jealous?)
> 
> 
> -----Original Message-----
> From: isapros-bounce@xxxxxxxxxxxxx 
> [mailto:isapros-bounce@xxxxxxxxxxxxx]
> On Behalf Of Thomas W Shinder
> Sent: Monday, July 17, 2006 6:14 PM
> To: isapros@xxxxxxxxxxxxx
> Subject: [isapros] Re: Exch permissions Q
> 
> OK, got it.
> 
> Anything in the Event Viewer around the time you made the change?
> 
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://blogs.isaserver.org/shinder/
> Book: http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
> 
>  
> 
> > -----Original Message-----
> > From: isapros-bounce@xxxxxxxxxxxxx
> > [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
> > Sent: Monday, July 17, 2006 8:08 PM
> > To: isapros@xxxxxxxxxxxxx
> > Subject: [isapros] Re: Exch permissions Q
> > 
> > Exchange; it don't matter if ISA is involved or not.
> > 
> > Jim Harrison
> > jim@xxxxxxxxxxxx
> > www.isatools.org
> > 
> > Sent  using Vista Beta 2 and Office 12 Beta 2 (aincha jealous?)
> > 
> > -----Original Message-----
> > From: isapros-bounce@xxxxxxxxxxxxx
> > [mailto:isapros-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Thomas W Shinder
> > Sent: Monday, July 17, 2006 5:03 PM
> > To: isapros@xxxxxxxxxxxxx
> > Subject: [isapros] Re: Exch permissions Q
> > 
> > I'm just trying to figure out if it's an Exchange thang or an ISA 
> > thang.
> > 
> > Thomas W Shinder, M.D.
> > Site: www.isaserver.org
> > Blog: http://blogs.isaserver.org/shinder/
> > Book: http://tinyurl.com/3xqb7
> > MVP -- ISA Firewalls
> > 
> >  
> > 
> > > -----Original Message-----
> > > From: isapros-bounce@xxxxxxxxxxxxx
> > > [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
> > > Sent: Monday, July 17, 2006 7:01 PM
> > > To: isapros@xxxxxxxxxxxxx
> > > Subject: [isapros] Re: Exch permissions Q
> > > 
> > > None of those deal in single-user problems.
> > > Neither me nor my wife have any problems with OWA - only my 
> > > daughter...
> > > 
> > > 
> > > -------------------------------------------------------
> > >    Jim Harrison
> > >    MCP(NT4, W2K), A+, Network+, PCG
> > >    http://isaserver.org/Jim_Harrison/
> > >    http://isatools.org
> > >    Read the help / books / articles!
> > > -------------------------------------------------------
> > >  
> > > 
> > > -----Original Message-----
> > > From: isapros-bounce@xxxxxxxxxxxxx
> > > [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Greg Mulholland
> > > Sent: Monday, July 17, 2006 16:33
> > > To: isapros@xxxxxxxxxxxxx
> > > Subject: [isapros] Re: Exch permissions Q
> > > 
> > > seen this one jim?
> > > http://support.microsoft.com/kb/327843/en-us
> > > 
> > > 
> > > ----- Original Message -----
> > > From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
> > > To: <isapros@xxxxxxxxxxxxx>
> > > Sent: Tuesday, July 18, 2006 9:29 AM
> > > Subject: [isapros] Re: Exch permissions Q
> > > 
> > > 
> > > OK, it's not working internally and externally, and you've
> > configured
> > > a split DNS so that internal users aren't looping back 
> through the 
> > > external interface so that internal users are using Direct Access 
> > > (just so that we remove the ISA firewall from the equation).
> > > 
> > > 
> > > 
> > > Thomas W Shinder, M.D.
> > > Site: www.isaserver.org
> > > Blog: http://blogs.isaserver.org/shinder/
> > > Book: http://tinyurl.com/3xqb7
> > > MVP -- ISA Firewalls
> > > 
> > >  
> > > 
> > > > -----Original Message-----
> > > > From: isapros-bounce@xxxxxxxxxxxxx 
> > > > [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
> > > > Sent: Monday, July 17, 2006 6:18 PM
> > > > To: isapros@xxxxxxxxxxxxx
> > > > Subject: [isapros] Re: Exch permissions Q
> > > > 
> > > > That's what I thought I did, but checking Exch 
> permissions, it's 
> > > > enabled.
> > > > 
> > > > 
> > > > -------------------------------------------------------
> > > >    Jim Harrison
> > > >    MCP(NT4, W2K), A+, Network+, PCG
> > > >    http://isaserver.org/Jim_Harrison/
> > > >    http://isatools.org
> > > >    Read the help / books / articles!
> > > > -------------------------------------------------------
> > > >  
> > > > 
> > > > -----Original Message-----
> > > > From: isapros-bounce@xxxxxxxxxxxxx 
> > > > [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas
> > W Shinder
> > > > Sent: Monday, July 17, 2006 16:11
> > > > To: isapros@xxxxxxxxxxxxx
> > > > Subject: [isapros] Re: Exch permissions Q
> > > > 
> > > > OK, you might have turned off her account's access to OWA.
> > > > 
> > > > Thomas W Shinder, M.D.
> > > > Site: www.isaserver.org
> > > > Blog: http://blogs.isaserver.org/shinder/
> > > > Book: http://tinyurl.com/3xqb7
> > > > MVP -- ISA Firewalls
> > > > 
> > > >  
> > > > 
> > > > > -----Original Message-----
> > > > > From: isapros-bounce@xxxxxxxxxxxxx 
> > > > > [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of 
> Jim Harrison
> > > > > Sent: Monday, July 17, 2006 6:10 PM
> > > > > To: isapros@xxxxxxxxxxxxx
> > > > > Subject: [isapros] Re: Exch permissions Q
> > > > > 
> > > > > No; doesn't work from in or out, but MAPI works fine. 
> > > > > 
> > > > > 
> > > > > -------------------------------------------------------
> > > > >    Jim Harrison
> > > > >    MCP(NT4, W2K), A+, Network+, PCG
> > > > >    http://isaserver.org/Jim_Harrison/
> > > > >    http://isatools.org
> > > > >    Read the help / books / articles!
> > > > > -------------------------------------------------------
> > > > >  
> > > > > 
> > > > > -----Original Message-----
> > > > > From: isapros-bounce@xxxxxxxxxxxxx 
> > > > > [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of 
> Steve Moffat
> > > > > Sent: Monday, July 17, 2006 15:58
> > > > > To: isapros@xxxxxxxxxxxxx
> > > > > Subject: [isapros] Re: Exch permissions Q
> > > > > 
> > > > > She can log in from outlook internally?..did you disable
> > > > her mailbox?
> > > > > 
> > > > > S
> > > > > 
> > > > > -----Original Message-----
> > > > > From: isapros-bounce@xxxxxxxxxxxxx 
> > > > > [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of 
> Jim Harrison
> > > > > Sent: Monday, July 17, 2006 7:06 PM
> > > > > To: isapros@xxxxxxxxxxxxx
> > > > > Subject: [isapros] Exch permissions Q
> > > > > 
> > > > > My turn to ask...
> > > > > 
> > > > > I disabled my daughter's OWA access while she was in
> > > school because
> > > > > the raging dumba$$3$ in your school let the kids veg on the
> > > > Internet
> > > > > all freakin' day (different issue).
> > > > > Now that she's actually gradumatated, I want to re-enable
> > > it, but I
> > > > > can't make it work.
> > > > > Of course, I don't know what I did, yasilly; or else I
> > > wouldn't be
> > > > > asking.
> > > > > ISA policies allow her to log in, but the OWA page keeps
> > > > regurgitating
> > > > > "401.1".
> > > > > 401.1 is supposed to be "invalid credentials", but I know the 
> > > > > username/password are correct.
> > > > > 
> > > > > I've checked her Exch permissions, and they seem fine
> > > (same as mine
> > > > > for her mailbox).
> > > > > 
> > > > > -------------------------------------------------------
> > > > >    Jim Harrison
> > > > >    MCP(NT4, W2K), A+, Network+, PCG
> > > > >    http://isaserver.org/Jim_Harrison/
> > > > >    http://isatools.org
> > > > >    Read the help / books / articles!
> > > > > -------------------------------------------------------
> > > > >  
> > > > > 
> > > > > All mail to and from this domain is GFI-scanned.
> > > > > 
> > > > > 
> > > > > 
> > > > > All mail to and from this domain is GFI-scanned.
> > > > > 
> > > > > 
> > > > > 
> > > > > 
> > > > 
> > > > 
> > > > All mail to and from this domain is GFI-scanned.
> > > > 
> > > > 
> > > > 
> > > > 
> > > 
> > > 
> > > 
> > > 
> > > All mail to and from this domain is GFI-scanned.
> > > 
> > > 
> > > 
> > > 
> > 
> > 
> > All mail to and from this domain is GFI-scanned.
> > 
> > 
> > 
> > 
> 
> 
> All mail to and from this domain is GFI-scanned.
> 
> 
> 
> 

Other related posts: