Give external users access to resources?

Hello TechNet
I need to know if it's possible to give external exchange users access to a meeting room or a resource in Exchange.
We have Exchange 2007 and 2013, the users in the Exchange 2013 enviroment will need access to resources in the Exchange 2007 enviroment. The most important thing is that users can be able to book meeting rooms and get an instant reply from the meeting room.
I've had a look at GalSync (http://www.galsync.com/) but this tool will only synchronize the objects.. so i might as well create a simple powershell script instead to accomplish this.
If needed I will upgrade the Exchange 2007 to 2013, this needs to be done anyway.
Thanks :)
Best Regards Bjørn Olav Vangen Aure

Hi,
About giving external exchange users access to a meeting room or a resource in Exchange, do you mean let non-Exchange users (Hotmail users, Gmail users etc.) to book Exchange room mailbox or Exchange 2013 users for Exchange 2007 server? What’s your detailed
Exchange environment? An organization with Exchange 2007 coexistence with Exchange 2013 or two forests with one for Exchange 2007 and another forest with Exchange 2013?
Generally, if Exchange 2007 and Exchange 2013 are in the same forest of one organization, all room mailboxes created in Exchange 2007 and Exchange 2013 should be available for all users in the organization. If your requirement is cross-forest room booking,
we need to establish a forest trust between the forests, configure cross-forest Availability service, and GALSYNC. For more information about detailed steps, please refer to the following article:
http://blogs.technet.com/b/neiljohn/archive/2011/10/12/exchange-server-2010-cross-forest-delegation.aspx?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+NeilJohnson-ARocknRollNerd+(Neil+Johnson+-+a+rock+'n+roll+nerd...)
Hope it helps.
Thanks,
Winnie Liang
TechNet Community Support

Similar Messages

What provision should i give to user accessing applications via Smartview?

What provision should i give to user accessing applications via Smartview in Shared Services.?
Would Server access do? Or i need to give something else?
Requirement is tht the user should be able to retrive and submit data via Smartview.

You need to provision the user with server access - this will give the user the ability to connect to the Essbase server in Smart View only. The user will not see any applications listed.
Then provision the user as write on each application you want them to see and submit data.
Regards,
Robb Salzmann

Project Online External User Access

Hello,
I'm testing the Project Online Preview and I would like to share the deliverables list on a project site with an external user (a client for example); so I configured the site collection with Project Web App to the "Allow
external users who accept sharing invitations and sign in as authenticated users" option. Then I tried to share the list with an external e-mail with a Microsoft account, but the invitation email was not sent.
External Sharing on SharePoint admin Center is configured on "Allow both external users who accept sharing invitations and anonymous guest links"
and my PWA site works in S"harePoint Permission Mode".
The same procedure on a classic SharePoint site collection work perfectly.
Any suggestions, please?
Matteo

Hello,
I got some of the external users to work. I am still trying to sort it out, but thought I will give you what I found.
The external user that I got work was another user in another domain, but the account was separate domain in a Office365. I have not been successful so far with an external account, that was not part of the Office
365.
Here is what I did to get it to work.
1) Login into an Office 365 account. Let's call it OFFICE999.
2) Then paste the link from my PWA site into browser.
3) Access was denied, but page provide me a link to Request Access
4) Then jump to my Office 365 account with PWA. Went to the PWA site and click on Settings icon and then site settings.
5) click on "Access request and Invitation"
6) under the Pending request, approved user and put the user as "Project Web APp Visitor"
7) Jump back to the Office999 and read my email, click on the link.
8) I got access denied again
9) When back to Office 365 PWA Admin account and added user to PWA users
10) went back to Office999 account, refreshed the screen and get access to PWA site,
11) BUT it says account doesn't have a LICENSE. So I am at that point trying to find out how to give an external user a license.
Cheers!
Michael Wharton, MVP, MBA, PMP, MCT, MCTS, MCSD, MCSE+I, MCDBA
Website http://www.WhartonComputer.com
Blog http://MyProjectExpert.com contains my field notes and SQL queries

Power Shell Web Access - How to limit the cmdlets and give regular users, access to perform tasks

It is possible to give to regular/standard users, powershell web access to give only, for example, "get-" cmdlets?
The ideia is to provide help desk tech users, a minimum level of access on some servers, and it will be usefull to give then, basic and restrcted access to a few cmdlets, performe harmless activities and mybe some level of access, not alloweing to to using
RDP, but PS, insted

While PowerShell Web Access (PSWA) does require authorization rules to function, these rules do not specify what cmdlets can be used in a PSRemoting session. The PSWA authorization rules define what user, or group of users, can remotely connect to what computer,
or group of computers, through the PSWA gateway (the PSWA server).
What you need to research are session configurations and/or endpoints. These are separate from PSWA, but can be used in conjunction with PSWA (PSWA website > Optional connection settings > Configuration >
NameOfConfiguration), just as they can in a standard console-based PSRemoting session (Enter-PSSession -ComputerName
server01 -Configuration NameOfConfiguration -or- Invoke-Command -ComputerName
server01 -Configuration NameOfConfiguration).
Start your research with New-PSSessionConfigurationFile and then Register- and Unregister-PSSessionConfiguration. These have been great for our environment, allowing non-admin users access to run very specific cmdlets as an admin, without being an admin
on the computer.

How to give a user access to just 2 fields in a user account properties

Is it possible to create a user that has basic access rights in Active Directory but give it access to just the users name and telephone number of every user in Active Directory? We have a Windows 2003 AD level at the moment.
Thanks.

Sure, by default a user you create in Active Directory is going to be apart of Domain Users. This user will be an Authenticated User and will have Read permissions over all other users in AD, meaning they can see all other users information.
If you want you can delegate control to a user or group and limit or expand what the user can do. For instance you can right-click the name of your domain in Active Directory Users and Computers and click Delegate Control then click Next. Click
add to add a user or test user, then click Next. Click the Create a custom task to delegate then click Next, select Only the following objects in the folder, then select account objects and click Next. Click Property-specific and there you'll find things like
Read displayName. Check Read displayName and Click next then click Finish. So you've delegated that to that user or group.
How to Delegate Basic Server Administration To Junior Administrators.
http://support.microsoft.com/kb/555986
Best Practices for Delegating Active Directory Administration
http://technet.microsoft.com/en-us/library/cc773318%28v=ws.10%29.aspx
If it answered your question, remember to “Mark as Answer”.
If you found this post helpful, please “Vote as Helpful”.
Postings are provided “AS IS” with no warranties, and confers no rights.
Active Directory: Ultimate Reading Collection

END USER accessing only the Output of report

Hi,
I'm creating reports based on queries, right now we are planning to give view access to end users, but my doubt if end user hits view on the report the query runs everytime and produces the report, what I want to achieve is that the we schedule the report before night and end user will only view the PDF output the query produces by the scheduling, How can I achieve this?

So do we need to give the user access to schedule button as well? and Do you mean run report online option?
Any update please?
Edited by: user8937215 on Aug 5, 2010 7:55 AM
E

Giving users access to Excel reports created from cubes

I have created several Excel dashboards and would like to give regular users access to view them. I'd like them to be able to choose their own date ranges using different slicers in the dashboards. What kind of security do I need to setup to
give a user access to these with only view rights? It looks like right now they receive a datasource error when they open the files.
Thanks in advance!

On the DW SQL Server, click Start, click All Programs, click
Microsoft SQL Server 2008, and then click SQL Server Management Studio.
In the Connect to Server dialog box, in the Server type list, select
Analysis Services.
In the Server name box, select or type the name of the server where the DW DB Server is located, and then click
Connect.
In Microsoft SQL Server Management Studio, in Object Explorer, expand the <server name> node, expand the
Databases node, expand the DWASDataBase node, and then expand the
Roles node.
Double-click the SCDW_Report_Readers node.
In the Edit Role dialog box, in the Select a page pane, click
Membership.
Click Add to add users or click Remove to delete users, and then follow the instructions on the screen. This adds and deletes users who have access to the whole cube.
Antoine AL Ibry

Let users access personal folder when using webdav on iPad

Hi,
I am setting up Lion server so users on an Active Directory network can access webdav folders from iPads.
I have got this working fine when accessing a shared multi user folder.
I want users to also be able to access their own personal folders, with no one else being able to access the folder.
I can share the Users folder but this will give each user access to other users folders how can I fix this?
Thanks

I am still waiting for an answer. If you don't know the answer, but know who to ask or where to look to find an answer, I'd really appreciate it.

Dashboard User Access

-All
Can i give a user access to a Dashboard but not give them access to the Dashboard requests in the shared folder. I would like for them to have the ability to see a Dashboard, but not update(in answers) any requests in the shared folder for the requests in the dashboard.
Is this possible? I can't seem to find a way to do this without giving them access to the Shared Folder and the Requests in the Dashboard.
Hopefully this makes sense
Thanks in advance!

Hi User -
This is definitely possible. Here are the steps to take:
1) Login as Administrator (or any user who has the power to change security)
2) Click on Settings > Administration
3) Click Manage Interactive Dashboards
4) Click the security button (looks like a lock) for the dashboard in question
5) Add the user or group from the right side to the left of the screen
6) The default access is full control for this new user/group. Toggle through the choices to "read" access by clicking on the access description
7) Click "Finished", then "Finished" again to get back to the main admin screen
8) Click "Manage Presentation Catalog"
9) Navigate to the folder that stores the Answers requests for the dashboard
10) Click the permissions button and provide "read" access to the user/group, similar to how you just did for the dashboard.
These steps should allow the user to view the reports in the dashboard page but not modify anything.
I hope this helps, and please award points if you found this useful!
Regards,
Jason

How to give an user permission to access centain Transformations?

I would like to know how to give an user permission to access centain Transformations in one InfoArea only. I already limited the selection in one InfoArea now. I want users can only Display Transformations for all the InfoObjects under this InfoArea. Does anyone know the detail steps? Thanks!

HI,
are you working under Analysis Auth (BI7) or Reporting Auth (BW 3.X)?
If you work with the new concept you can restrict your authorization by using theinfoobjet: 0TCAIFAREA.
before you Add 0TCAIFAREA as an external hierarchy characteristic to 0INFOPROV also when you restrict your auth by infoprovider you can choose the infoarea hierarchy
hope it help
Regard's

How can i give multiple users admin access?

I would like to give another user on my macbook pro admin access, so that they can install programs without having to ask me for the password each time. I do not want the password to be the same for my profile, because I don't want them getting into my account. So is it possible to have a separate password for admin use only? This might be a dumb question and I know their is probably a simple way to do this, but I'm new to macs so any help would be greatly appreciated. Thank you.

Convert a standard user to an administrator
Choose Apple menu > System Preferences, then click Users & Groups.
Click the lock icon to unlock it, then enter an administrator name and password.
Select a standard user or managed user in the list of users, then select “Allow user to administer this computer.”
http://support.apple.com/kb/PH18891

Is there a way for end users to give their manager access to change their Out of Office, without an admin involved?

Our end users need to be able to give their managers access to enable their out of office.
question 1. Can this be done without giving them full access?
question 2. If they need full access, can the end user themselves give this access? (I've tried giving another user "owner" rights, but the user still can't seem to open my calendar from OWA to adjust my out of office)
question 3. Can this be done without an Sys Admin being involved?

You can create a RBAC role for each manager scoped to each of their employees that lets them run the Set-MailboxAutoReplyConfiguration cmdlet on the exchange server. Otherwise they will need full access to the users mailbox which an admin would have
to grant, the end user can not grant this permission. Then they can open the other users mailbox in OWA and set the OOF
DJ Grijalva | MCITP: EMA 2007/2010 SPA 2010 | www.persistentcerebro.com

Can I give our AD users access to Visual Studio Online?

Our AD is connected to our Azure Active Directory and synced via DirSync.
Is it possible for me to give our AD users access to VSO and they use their organizational login credentials OR do they need to create Microsoft accounts?
Our goal is single sign-on with our AD credentials. Please let me know if this is possible?
Thanks, Sam

Hi Sam,
You can link your Visual Studio Online account with your Azure Activy directoy. Directory administrators control who joins the directory and has possible access to your Visual Studio Online account. The users can use Azure Active directory accounts
to sign in Visual Stduio Online account. You can check this
page for more information about manage organization access for your account.
The numbers of users can access Visual Studio Online account depend on your license of Visual Studio Online account. You can add no more then 5 basic users and unlimited MSDN subscriptions if you have Basic license of Visual Studio Online account. Check
this
page for the pricing. However, you can assign team members stakeholder license if the users only view the project-level information. Check this
page for more information about stakeholder license of Visual Studio Online.
Best regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Access to my Office 365 third-party app for external user : "a User account is not registered for the account"

In my third-party web application of Office 365, I want to have access to the contacts, events and emails of all the users from the organizations who installed my app. The thing is I don't want that all these users have to grant me access, I just want one
admin of the org to grant access for my app and then be able to retrieve the data I need for all the users.
To test for one organization, I logged in as the admin and proceed to the Oauth2 authentication to retrieve the access token and in the first request (the GET one to retrieve an authorization code) i add the parameter
prompt=admin_consent.
With this access token, I can access the data (emails, contact, event) of the admin
for instance for the contacts
uri: https://outlook.office365.com/ews/odata/Users(adminemail)/Contacts
but not the data of the other users of this org with this uri
uri: https://outlook.office365.com/ews/odata/Users(useremail)/Contacts
The only thing I can do is retrieve an access token for each user but it supposed that each user has to authorize the access to the app but it's very cumbersome. So, i don't see what enables the parameter prompt=admin_consent and how to use it. Does anybody
know what it does?
And my question is: how can I do to access the data of all the users of one organization when the access has been granted by one admin?
Thank you!

This was answered on StackOverflow by Dushyant Gill. http://stackoverflow.com/questions/25316175/access-to-my-office-365-third-party-app-for-external-user-a-user-account-is-n/25316678#25316678
You are sending the OAuth request to a tenant specific endpoint of Azure AD. Note the {key_provided} part of your Url - that part represents the tenantid or a registered domain name of an Azure AD tenant. Azure AD throws this error is the user signing in
is not a user in that tenant.
Multi-tenant applications like yours have two options:
Perform home realm discovery yourself and send the SSO request to the correct tenant-specific endpoint of Azure AD: when a new Azure AD organization signs-up for your application, record its tenant ID, and registered domain names. On your login page, ask
the user for their email and try to discover what Org they belong to using the suffix the email.
Use the common endpoint of Azure AD. Instead of the {key_provided} part of the URL, use 'common'. In this case Azure AD will determine the user's tenant and sign-in the user. The token that your application will receive will still be from the user's tenant
(iss claim).
2 is more convenient for apps. However #1 has an advantage when the user's Organization has customized their sign-in page with the company logo etc - in the case of #1 the user will directly be taken to the customized and familiar sign-in page.
I recommend a combination of the two: try determining the user's organization and sending them to the tenant specific SSO endpoint. If you're not able to - send them to the common endpoint.

Best way to give restricted execute access on pssession to remote user on a server

we have some windows 2008 R2 development environment servers. On these servers we are planning to provide access to developers via PSremoting. We want to restrict the users in such a way that they can only run .bat files present in a certain UNC path. What
is the best way to achieve the same. Can we create a PSSession Configuration for this?
Please note that we are planning to enable WSmanCredSSP on client (it is already enabled on server).
Also, is it possible to give such an access where user can only login to server using powershell's PSsession and not through interactive remote desktop connection.
ApoorvaW

Hi ApoorvaW,
If you want to setup a restricted pssession, please try to set the session configuration with the cmdlet:
Register-PSSessionConfiguration
Securing Session Configurations
You can assign session configurations to users automatically. For example, you may want to restrict the commands in a session that are available to some users. This is done in a two-step-process:
1. Create a new session configuration that restricts the session to only a subset of commands.
2. Change security access permissions so that the intended users can only access the new session configuration.
For more detailed information about restricted session and paremoting security, please refer to these articles:
PowerShell Remoting: How to Restrict User Commands
Restrict Session
If there is anything else regarding ths issue, please feel free to pst back.
Best Regards,
Anna Wang

Give external users access to resources?

Similar Messages

Maybe you are looking for