Disable OWA for account completely

Hi,
We have Exchange 2013 running with OWA. Our accounts have mailboxes which we sometimes (succesfully) disable for webmail. However, it is possible to simply open webmail so that it asks for your credentials. If you enter
[email protected] and a wrong password it will simply tell you password incorrect. If you enter the correct password it will log you in but give this 'error' (which it is supposed to since webmail is disabled for this
account): Outlook Web App is currently disabled for user domain\account.
My problem here is that even though behaviour is as expected this seems to be vulnarable for brute force attacks and such.
So basically my question is: is there a way to disable OWA completely for these accounts in such a way, that it won't let you notice wether or not the password is entered correctly/incorrectly. Or is there another way to somehow work around this
making webmail more secure?
Best regards, J

Hi,
If you don't want all the people in your organization to use OWA, you can remove OWA virtual directories. If you disable OWA feature for some specific users, the expected behavior is what you described, "If you enter
[email protected] and a wrong password it will simply tell you password incorrect. If you enter the correct password it will log you in but give this 'error'".
Hope this can be helpful to you.
Best regards,
Amy Wang
TechNet Community Support

Similar Messages

+, - button and inherited tick box is in disabled mode for account assignme

In the attribute tab of org structure (PPOMA_BBP), we are not getting +, - button and inherited tick box is in disabled mode for account assignment category (attribute is KNT).
We want to enter two values for the account assignment category with inherited tick box (ticked).
Please suggest me how to get the +, - and inherited tick box (ticked) for the account assignment.
Regards.

Hi Imam,
Unde attributes
You will find one Application Toolbar...
Overview, Select Attribute, Check Entries,Insert line,Delete line..
So under All values you will find AcctAssigCat, Exculded, Default, Inheried
Select the row and click on Insert Line, now you should be able to insert the new acct Assignment category
rg
sam

Disable OWA for External Site

Dear Expert,
I just implemented Exchange Server 2013, I have the request from management team. They already used OWA and Mobile on Internal,
but they would like to disable OWA and enable mobile when user stay outside the office.
Please advice

Hi,
Do you mean you want to know how you can block or disable external OWA for exchange users without affecting internal OWA and external ActiveSync for them?
If it is, here are the steps you can use to block all users to access OWA externally.
1. Create a new website only for ActiveSync service. Ex: (New-WebSite -Name TestSite -Port 80 -HostHeader TestSite -PhysicalPath "$env:systemdrive\inetpub\testsite").
2. Assign new IP address to that website.
3. Create ActiveSync virtual directory in the new website Ex: (New-ActiveSyncVirtualDirectory -WebSiteName "TestSite" -ExternalURL http://www.contoso.com/mail -InternalURL http://contoso/mail).
4. Assign certificate to the new website.
5. Don’t create OWA and ECP virtual directory in the new website.
6. On the firewall NAT the public IP address to internal IP address assigned to new website.
7. Use Default Website for internal outlook web access(Without External URL settings and no public IP address for the default site).
Alternatively, we can keep the default web site for external access of ActiveSync and external OWA disabled. Then create a new Web Site for Internal OWA-ECP using. For more details about this method, please refer to:
http://www.expta.com/2013/09/how-to-block-owa-2010-and-2013-for.html
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please
make sure that you completely understand the risk before retrieving any suggestions from the above link.
Thanks,
Winnie Liang
TechNet Community Support

Get users using OWA for devices

I would like to disable OWA for devices for all users except those currently using the OWA for iPhone/iPad app. Is there a PowerShell cmdlet available to grab mailboxes that have OWA for devices accessing them? I've been looking at get-activesyncdevices
but this only returns actual devices using activesync. I haven't seen how to pull the OWA for devices objects with PowerShell. They are visible in EAC when viewing details under Mobile Devices, but that's not very helpful for the number of users
would have to look through.
Exchange 2013 CU1 Enterprise

I found it, I was looking for Get-MobileDevice.

How can I just disable "navigation toolbar" completely for the App Tabs? I don't want to disable this for other normal tabs.

How can I just disable "navigation toolbar" completely for the App Tabs? I don't want to disable this for other normal tabs. This is important as otherwise while I am in the app tab, i mistakenly start browsing from that tab and meaning of the app tab is completely lost...

How can I view my full billing history for the app and music stores without iTunes installed?
No.
If my account has been compromised
If you even think this may have happened, immediately change your password.
See this -> Apple ID: Changing your password

Best practices for disabling an employees account, but leaving mailbox available for others while not accepting messages

I'm sure that other organizations have some policy for this. In our case, we want to keep the mailbox available for others to still access, but disable the user account and remove it from OWA.
In this case, I've disabled the AD object, disabled OWA from the features, and set the mailbox to only receive emails from a dummy mailbox (so that no new emails are accepted).
This all works fine and senders receive a NDR that their mail was rejected, however I'd also like to set a friendlier custom NDR to call the office instead when any sender attempts to send email to that recipient.
What would best practices, suggestions be for this behavior?

Hi,
According to your description, the user object in AD has been disabled.
In this case, the mailbox cannot mostly likely be accessed. Thus, maybe OOF couldn’t help you.
If I misunderstand your meaning, please feel free to let me know.
And we can depend on transport rule:
The recipient is
send rejection message to sender with enhanced status code:
http://technet.microsoft.com/en-us/library/bb123506(v=exchg.141).aspx
Thanks,
Angela Shi
TechNet Community Support

Completely disable SMS for my Skype online number....

I don't want to pay for SMS messages when people should be emailing me anyway. How can I completely disable SMS for my account so that no one can send me texts? Thanks!

I too would like to disable this "feature" as I don't use it, nor want it.
Just yesterday, my Microsoft keyboard malfunctioned and sent a burst of SMS messages through Skype until it drained my account which contained the default $5.00 credit when I signed up. I don't particularly care about the $5.00, but I'm annoyed that by dumb luck the feature sent these messages to my director (various quantities of 1s) and about 45 of them. The only thing that stopped sending the messages was that my account ran out of money. Good thing that it's not configured for auto-recharge. I have another Skype account with money in it and to prevent a similar occurrence in that account, I'm now going to dump the credit by texting myself. In texting myself because my cell phone has unlimited texting it at least will not cost me more money.
Depending on whether or not he has a text messaging plan on his phone this could create a nice little charge.
We need to have the ability to block SMS messages just as we can with our mobile phones.

I accidentally set up two accounts. One account with my old e-mail address which I've been using for years and has all of my purchases on it. Now I have a new account with my current e-mail address. How do I disable this new account?

I accidentally set up two accounts. One account with my old e-mail address which I've been using for years and has all of my purchases on it. Now I have a new account with my current e-mail address. How do I disable this new account? I need to disable the new e-mail address account so that I can add it as an additional e-mail to my old account. THEN, how do I make this new e-mail address my primary e-mail for this old account?

Did yoo go to Settings>iTunes and App Stores and sign out and sign back in?
Next see:
Frequently Asked Questions About Apple ID

I DON'T WANT TO UPGRADE OR HAVE AN ADD ON EVER, DISABLING UPDATES DOES NOT WORK, HOW DO I KILL ALL MEASAGES FOR UP GRADES AND ADD ON'S FOR EVER, ONCE AND FOR ALL, COMPLETELY, THE END AND NEVER BE BOTHERED AGAIN EVER!

I DON'T WANT TO UPGRADE OR HAVE AN ADD ON EVER, DISABLING UPDATES DOES NOT WORK, HOW DO I KILL ALL MESSAGES FOR UP GRADES AND ADD ON'S FOR EVER, ONCE AND FOR ALL, COMPLETELY, THE END AND NEVER BE BOTHERED AGAIN EVER! ALSO IF I KILL MYSELF I WILL HOLD YOU PERSONALTY RESPONSIBLE.edit

There is a world of information in these forums if you use the search function near the top right of this page. Just type in NAS for example and you get many threads on the subject (marked with a green checkmark if it solved the question) another example would be Airport Exterme and sound system. Once you formulate your ideas better then specific questions can be addressed one at a time. You may find that a less expensive choice for a server might be a mac mini. Good luck with your project, ask more specific questions and update you systems profile.

Itunes error message, account disabled not for security reasons

Just received an itunes error message, account disable not for security reasons. How do I enable the itunes account? This is a valid account that has been used for during the last six months.

All you can do is contact iTunes since resetting the PW did not work.
Apple - Support - iTunes - Contact Us

Temporarily disabling specific email accounts for phone shared by multiple users

Hi all and thank-you in advance for any potential help!
My company has a Blackberry "Style Flip" 9670 for our sales-people traveling in Northern Canada in the Yukon area. This phone goes with whoever is going on that particular trip, however it has 5 different email accounts associated with it for the 3 users that share it.
I don't know if this is possible with a Blackberry or not, but we would love if there was an easy way to temporarily disable the email accounts that do not belong to the person carrying the phone at that point in time.
The way it is now, we have User A (2 email accounts), User B (2 email accounts), and User C (1 email account) sharing this phone. If 'User C' is presently up north and has the phone and sends an email to 'User A' and 'User B', the email is still received on the shared BB for both 'User A' & 'User B' and wastes a lot of precious bandwidth. The main dilema is the two users with multiple accounts on that phone receive a ton of emails daily. This means 'User C' may have 1 crucial email waiting to be received, but has to wait for all of 'User A' & 'User B's' emails to be received before getting the important email.
Is there a way without deleting the accounts each time to turn certain email accounts on and off? Any help is much appreciated!
Colin

Creating an email filter on the BlackBerry Smartphone
Click here to Backup the data on your BlackBerry Device! It's important, and FREE!
Click "Accept as Solution" if your problem is solved. To give thanks, click thumbs up
Click to search the Knowledge Base at BTSC and click to Read The Fabulous Manuals
BESAdmin's, please make a signature with your BES environment info.
SIM Free BlackBerry Unlocking FAQ
Follow me on Twitter @knottyrope
Want to thank me? Buy my KnottyRope App here
BES 12 and BES 5.0.4 with Exchange 2010 and SQL 2012 Hyper V

I have a Adobe CC Photography plan and I would like to Upgrade for the Complete plan, What should I do? my account is Brazilian

I have a Adobe CC Photography plan and I would like to Upgrade for the Complete plan, What should I do? my account is Brazilian

Adobe only sell the latest version of Creative Suite which is CS6 so you can't buy CS5 anymore. Upgrades are also only available from CS5 to CS6 so CS3 wouldn't qualify anyway.
I'm afraid you are out of luck.

Disable Offline Folders in OWA for Devices

Is there a way to disable Offline Folders in the OWA for Devices mobile application? I have already disabled this setting in OWA, but this setting does not appear to cross over.
brian smith

Hi,
From your description, I would like to verify if you want to disable Offline Access in OWA. If yes, you can use the following cmdlet to check the result. If I have misunderstood your concern, please let me know.
Set-OwaMailboxPolicy –AllowOfflineOn NoComputers -Identity xxx
For more information, here is a helpful blog for your reference.
Offline access in Outlook Web App 2013
http://blogs.technet.com/b/exchange/archive/2012/11/06/offline-access-in-outlook-web-app-2013.aspx
Hope this can be helpful to you.
Best regards,
Amy Wang
TechNet Community Support

Disable Offline Folders in "OWA for Devices" App

Is there a way to disable Offline Folders in OWA for Devices?
I like this application, but it won't fly with security unless I can disable this Offline Folder feature. I already have offline folders disabled in OWA, but I guess it does not cross over into this space.
brian smith

Hi Smith,
I don't understand what's 'Offline Folders'. Based on my knowledge, it is .ost on Outlook client.
If you talk about "Work Offline in OWA", we can disable it via Using Outlook Web
App offline.
However I can't find Exchange build-in method to disable this feature for "OWA for Devices".
I only find this AllowCopyContactsToDeviceAddressBook parameter in Set-OwaVirtualDirectory and Set-OwaMailboxPolicy cmdlets.
This parameter specificed if users can copy the contents of their Contacts folder to a mobile device’s native address book when using OWA for Devices.
Thanks
Mavis Huang
TechNet Community Support

Disable Imap ,pop , sync ,owa for all new users

Hi
Based on the below
https://social.technet.microsoft.com/Forums/en-US/879f1efd-c9ca-40ef-a698-4d7fa106f1be/disable-imap-pop-sync-owa-for-new-users?forum=exchangesvrgeneral
I apply all the steps but some times it working and sometime not
shall I apply all steps on all Mailbox servers and CAS server ?
I applied only on CAS servers .
Please need help on this matter .
MCP MCSA MCSE MCT MCTS CCNA

Hi,
We don’t need to run this script on all the server. Just once is enough. For the problematic users, you can use Set-CASMailbox –id user |FL to check if the restrictions are applied
successfully:
https://technet.microsoft.com/en-us/library/bb124754(v=exchg.150).aspx
Thanks,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Simon Wu
TechNet Community Support

Disable OWA for account completely

Similar Messages

Maybe you are looking for