Restricting owa 2013 from internet for group users using ARR

I am trying to restrict owa access from internet for group of users using ARR.
http://www.msexchange.org/articles-tutorials/exchange-server-2013/mobility-client-access/iis-application-request-routing-part1.html
please suggest

Hello,
Thank you for your question.
This is a quick note to let you know that I am trying to involve someone familiar with this topic to further look at this issue.
Regards,
Winnie Liang
TechNet Community Support

Similar Messages

OWA 2013 Can't Update groups list

Home » Email
See moreRELATED
PROJECTS
Novell
to Microsoft Migration
In one corner: Novell 4.11, eDirectory, Groupwise, Oracle 8/8i, NT4 In the other: Windows Server 2000/2003, Active Directory Exchange 2000/2003, SQL Server 2000, XP Winner: Our users.
Total
Virtualization
I lead a project to virtualize all 12 of our current servers onto 2 physical hosts using VMware vCenter Server and setting up VM backups with Veeam.
Mimecast
Mail Filtering
Moving off of an antiquated Postini system to the new Mimecast platform.
1
Sonora
OWA 2013 Can't Update groups
Wrathyimp Feb
9, 2014 at 12:19 PM | MICROSOFT
EXCHANGE
Hi,
I am receiving the following error, while tring to update Distribution list from OWA 2013:
"The group can't be updated right now. Please try again later"
I have searched, but the discussion are mentioning the possibility of old Distribution List migrated from Old Exchange 2003. But I am still getting this error for newly created Distribution List also.
According to this technet discussion, its an bug, but its old like in August 2013, URL:
http://social.technet.microsoft.com/Forums/exchange/en-US/50937049-f919-4ce3-be21-24fdef2c7695/
http://social.technet.microsoft.com/Forums/exchange/en-US/cdd6f7ae-1b61-4d94-a57e-80c6711d09ce/ews-contactgroup-cant-edit-from-owa
So is it being fixed or is there any workaround to it.

I have Outlook 2007. Any Groups Created from Outlook is not editable, though I an create a new group (distribution list) on the OWA, which can be editable.
So What I feel is something with Outlook 2007.

I want to disable Internet access to user using GPO

I am using Win Server 2008 R2, I want to disable the users from accessing Internet which are in that OU. Can anyone tell me how is it possible ?

Hi,
Disabling Internet access using software on the client is inherently difficult. The client isn't aware of what is an internal resource (like an Intranet page for example) as opposed to an Internet resource. You can use GPOs to disable specific programs
(like browsers) or to change how traffic is routed by the client but in order to effectively control who can and can't access the Internet, your best bet is a perimeter device like a proxy or firewall that sits between your clients and the Internet and is
integrated with AD so it can manage access to the Internet based on users, groups, IP addresses, etc.
The closest you can come without a proxy is to configure a proxy server address for those users using the Internet Explorer Maintenance component (found under User Configuration\Windows Settings). This proxy can either be a non existent address or
if you want more control over the error messages users get, it can be an internal web server with a page that provide a custom message. The same configuration will allow you to list specific URLs that are exempt in case you have specific web sites, internal
or external that must be available.
Note that this option will apply to all browsing, internal and Internet based, but will only impact IE. Internet access using other browsers or other software will not be impacted unless that software leverages the IE proxy configuration (which many
applications do).
Hope this helps,
Guy

Is it possible to mass change desktop wall paper for all users using WGM?

is it possible to mass change desktop wall paper for all users using WGM?

yes, it's easy - change a machine to the desktop you want (the image must be on all the machines, with the same name, of course), find ~/library/preferences/com.apple.desktop.plist Copy that to your server (or just put it on a flash drive) In workgroup manager select preferences - details - "add". Navigate to that plist. (Optional - hit "edit" and cut and past from "often" to "always", then the user cannot change the desktop at all, if you leave it in "often" it will reset next log-on.)

I want to get desktop path for client user using webutil

oracle database 11g
oracle forms 10 g
client windows
i want to get desktop path for client user using webutil
as i want to save file in this path

To get the user's path to their Desktop is a two step process. First, you have to echo the %USERPROFILE% to a output file and secondly, read the directory from the output file in to Forms. The code would look similar to the following:
/* When-Button-Pressed trigger */
DECLARE
v_temp_path VARCHAR2(250);
v_temp_file VARCHAR2(12) := 'webutil.log';
f_file Client_Text_IO.File_Type;
BEGIN
Client_Host('cmd /c echo %USERPROFILE%\Desktop > c:\'||v_temp_file);
f_file := Client_Text_Io.FOpen('c:\'||v_temp_file, 'R');
Client_Text_Io.Get_Line(f_file,v_temp_path);
Client_Text_Io.FClose(f_file);
b_dummy := WebUtil_File.Delete_File('C:\'||v_temp_file);
--At this point, you have the path stored in the v_temp_path variable.
--You can assign this variable to a block item or reference it directly in your code.
END;
When you reference the value of the v_temp_path, don't forget to wrap the value in double-quotes (" ") becuase the path will have spaces. Since your plan is to write a file to the user's desktop, your call to FOPEN will look like this:
f_file := Client_Text_Io.FOpen('"'||v_temp_file||'"','W');
Hope this helps,
Craig...

Is it possible to reset password for any user using abap program

Hi friends,
Is it possible to reset password for any user using abap program by specifying client number and user id. in selection screen.
if any code for that to reset password please mail me.
Thanks & Regards,
Yogesh

Hello Yogesh,
Yes you can reset the password for any body using ABAP Code. But for that you really don't need any client number.
If this process is on regular basis, then recommended is to use BAPI for changing the user details Otherwise BDC also works fine.
=> Function Module - BAPI_USER_CHANGE
Call this in the program for resetting the password.
=> CALL TRANSACTION 'SU01' USING InternalTable
This will be executed in the BDC of SU01 transaction recording. Use the Password Change button in the application toolbar of transaction while recording.
Hope this helps.
PS If the answer solves your query, plz close the thread by marking it solved and rewarding each reply.
Regards

Cash with drawn from bank for petty cash use (FBCJ)

HI,
We are using cash journal (FBCJ)for all cash transactions. While withdrawing money from bank for petty cash use, howwe will handle in SAP.
Client wants to prepare bank payment voucher for withdrawing cash from bank. After preparing cheque by bank section the cheque will be handed over to cashier for withdrawing money from bank.
Thanks
Chris

Hi Satish,
Through FBCJ transaction you can do the cash receipt / cash payment to Bank (Bank clearing Account). By using the Business transaction "Receipt from Bank" and "Payment to Bank".
Hence bank posting will happen in the Bank clearing account. As soon as BRS is done, it will hit the Bank Main account.
Hope it is clear for you. If my reply is useful than please assign points for the same.
Thanks & best regards,
nms

Setting OOF for other users using EWS

Hello everyone,
I try to set the OOF for other users using EWS in an Exchange 2010 SP2 environment.
I use this code:
ExchangeService service = new ExchangeService(ExchangeVersion.Exchange2010_SP2);
service.Credentials = new NetworkCredential("username", "password", "domain");
service.TraceEnabled = true;
service.TraceFlags = TraceFlags.All;
service.AutodiscoverUrl("[email protected]");
OofSettings OOFSettings = new OofSettings();
OOFSettings.ExternalAudience = OofExternalAudience.All;
OOFSettings.ExternalReply = "Test";
OOFSettings.State = OofState.Enabled;
service.SetUserOofSettings("[email protected]", OOFSettings);
The account I use is a Service Account our Exchange Team set up. I can see all service properties, so I would assume that the connection to the ExchangeService works fine.
However when SetUserOofSettings executes, I receive a ServiceResponseException “Connection did not succeed. Try again later”.
What am I missing? Unfortunately, the error message does not provide any helpful informations.
Thank you and best regards
Julian

>The account I use is a Service Account our Exchange Team set up. I can see all service properties, so I would assume that the connection to the ExchangeService works fine.
What rights have they given the account, giving an Account Exchange Admin permissions won't give you any rights to access the Mailbox content. For this to work the account you using would need to be either have been granted Full Access via Add-MailboxPermission
or been given Application Impersonation rights (if its the later you need to make sure you use impersonation in your code).
I would suggestion you try using the EWSEditor
http://ewseditor.codeplex.com/ to test this out eg try connecting to the users folders and then try the OOF operation via the EWSEditor option to see if this works.
Other things to check is if this is a Brand new mailbox that has never been connected to before then the Mailbox folders won't be initialized (you can check this using Get-Mailboxstatistics) and you would get an error trying to perform any of
the EWS operations. If it works on some users and not others the possibly your getting throttled.
Cheers
Glen

How to restrict delivery Block in va02 for various users

Dear Experts
I am suppose to restrict the user depening on delivery block in transaction VA02 .There are no SAP pre-defined feilds authorization Object to restrict at delivery block level from PFCG ,and I have Created manually authorization object and class in Tcode Su21 and Su20 with table VBAK but its not giving any change .
Please kindly help
Thanks in advance
krishna

Hi
We have a very complex Billing block functionality. The sales orders are handled at many levels and when the process is completed at one level, they need to change the billing block to another one and the system will allow to change the block to the specified one only and not to any other block. There is a control in the code to restrict the allowed blocks.
We also maintain a Ztable with list of users (few super users/process primes and key people) for whom system will allow to remove/change to any other block as they wish.
In your case, if it is not possible through authorisations, then the best way is to handle the requirement through a Ztable for the users allowed to change the delivery block. This is one of the possible alternatives.
Thanks,
Ravi

Remove Following people from mysite for all users

[System.Reflection.Assembly]::LoadWithPartialName("Microsoft.Office.Server")
$web = Get-SPWeb https://www.contoso.com/teams/yourteam
$context = [Microsoft.SharePoint.SPServiceContext]::GetContext([Microsoft.SharePoint.SPSite]$web.Site)
$upm = New-Object Microsoft.Office.Server.UserProfiles.UserProfileManager $context
$users = $web.AssociatedMemberGroup.Users | where IsDomainGroup -eq $false
$useraccounts = $users | select loginname | Foreach {"$($_.loginname)"}
foreach ($user in $users) {
$profile = $upm.GetUserProfile($user.UserLogin)
#$objectToFollowRelativeToWeb = "/"
if ($profile)
#Create a Social Manager profile
#SPSocialFollowingManager
$followManager = New-Object Microsoft.Office.Server.Social.SPSocialFollowingManager($profile, $context)
$following = $followManager.GetFollowed([Microsoft.Office.Server.Social.SPSocialActorTypes]::Users)
for ($i=$following.Count - 1; $i -ge 0; $i--) {
$followed = $following[$i]
$acctname = $followed.AccountName
#if claims:
$acctname = 'i:0#.w|'+$acctname
if ($acctname -iin $useraccounts ) {
[Microsoft.Office.Server.Social.SPSocialFollowResult]$res = $followManager.StopFollowing($followed)
Write-Verbose "$($user.UserLogin) stop following $acctname result is $res"
I have the above script from one of the technet solution to remove followeronly for Contributors from MySite. I want this script to run for all user and remove all existing association. Can someone help me update this script.
Thanks Ba$va

Hi Basva,
According to your description, my understanding is that you want to remove all existing association for all users
The $users = $web.AssociatedMemberGroup.Users | where IsDomainGroup -eq $false is to get all users in Contributors group. You can change the line to
$users = $web.AllUsers, then run the script, compare the result.
Here is an post for getting all users using PowerShell, please take a look at:
http://www.sharepoint2013.me/Blog/Post/160/Get-all-the-unique-users-in-a-farm-using-PowerShell-script
Best Regards,
Wendy
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Wendy Li
TechNet Community Support

CMDLET commands regarding setting a default font for all users using OWA on an exchange 2010 platform

HI,
We are running Exchange 2010 and are migrating users from 2003 to 2010 with no problems. The client has asked me to set OWA font to LuidaSans which I can do for individuals with no problems. However, when I try and run the following command
Get-Mailbox -Resultsize Unlimited | Set-MailboxMessageConfiguration -LucidaSans but then got a message to state
"property composefontname can't be set on this object becuase it requires the object to have version 0.1 <8.0.535.0> or later. The object's currant version is 0.0 <6.5.6500.0>"
What object is this reffered to? Can anyone help please?
Thanks
Paul

Hi,
To set a default font for all users, you can use this command: -
Get-Mailbox | Set-MailboxMessageConfiguration -DefaultFontName "Trebuchet"
You can use any font style in place of “Trebuchet”.
I hope this information will be helpful for you.
Thanks and regards
Ashish@S
Ashish@V

2013 CAS working for 2010 users, certificate error on 2013 users

Yesterday we decided to pull the trigger on migrating to exchange 2013 from 2010. We changed the autodiscover URI's to mail.domain.com and we also changed the DNS records to as follows:
mail.domain.com -> 2013 cas
mailhub1.domain.com -> 2010 cas
mailhub2.domain.com -> 2013 cas
Ive pushed every single URL I can find through mail.domain.com. We had a few odd issues but were able to work through them. Now we are about 10 hours into troubleshooting without making any headway. Here is where we currently stand:
Exchange 2010 User - Works on everything - Web, Mac Mail, Outlook (inside and outside), mobile clients
Migrated and New Exchange 2013 User - Works on Web, Mac Mail, Mobile. Does not work on outlook inside or out.
For outlook we receive the following error:
Microsoft Outlook
There is a problem with the proxy server's security certificate.
The name on the security certificate is invalid or does not match the name of the target site mail.domain.com.
Outlook is unable to connect to the proxy server. (Error Code 0)
OK
---------------------------The certificate is perfectly fine from what I can tell. The main domain on it is "mail.domain.com" with "autodiscover.", "mailhub1.", "mailhub2.", and "domain.com" in the Subject Alternate Name.What on earth could I be missing here? It works on exchange 2010 but not on 2013 which is the exact opposite of what I was expecting.

Oooh, Im getting an error now in testconnectivity that wasnt there before so one of the approx. 6000 changes I made must have triggered it!
Attempting to ping the MAPI Mail Store endpoint with identity: [email protected]:6001.
The attempt to ping the endpoint failed.
<label for="testSelectWizard_ctl12_ctl06_ctl02_ctl06_tmmArrow">Tell
me more about this issue and how to resolve it</label>
Additional Details
So I looked at the regirestry of both the old mailhub1 and the new mailhub2. The new one only had 2 entries where as the old one had tons. I copied it over, added mailhub2:6001-6004;mailhub2.domain.com:6001-6004 and did an iisreset and restarted the services.
The port still isnt open. Do I have to run a command or reboot? I would rather not have to reboot but I understand if I do. Also, am I doing this right?
Attempting to ping the MAPI Mail Store endpoint with identity: [email protected]:6001.
The attempt to ping the endpoint failed.
<label for="testSelectWizard_ctl12_ctl06_ctl02_ctl06_tmmArrow">Tell
me more about this issue and how to resolve it</label>
Additional Details
Attempting to ping the MAPI Mail Store endpoint with identity: [email protected]:6001.
The attempt to ping the endpoint failed.
<label for="testSelectWizard_ctl12_ctl06_ctl02_ctl06_tmmArrow">Tell
me more about this issue and how to resolve it</label>
Additional Details
Attempting to ping the MAPI Mail Store endpoint with identity: [email protected]:6001.
The attempt to ping the endpoint failed.
<label for="testSelectWizard_ctl12_ctl06_ctl02_ctl06_tmmArrow">Tell
me more about this issue and how to resolve it</label>
Additional Details
Attempting to ping the MAPI Mail Store endpoint with identity: [email protected]:6001.
The attempt to ping the endpoint failed.
<label for="testSelectWizard_ctl12_ctl06_ctl02_ctl06_tmmArrow">Tell
me more about this issue and how to resolve it</label>
Additional Details
Attempting to ping the MAPI Mail Store endpoint with identity: [email protected]:6001.
The attempt to ping the endpoint failed.
<label for="testSelectWizard_ctl12_ctl06_ctl02_ctl06_tmmArrow">Tell
me more about this issue and how to resolve it</label>
Additional Details
Attempting to ping the MAPI Mail Store endpoint with identity: [email protected]:6001.
The attempt to ping the endpoint failed.
<label for="testSelectWizard_ctl12_ctl06_ctl02_ctl06_tmmArrow">Tell
me more about this issue and how to resolve it</label>
Additional Details
Attempting to ping the MAPI Mail Store endpoint with identity: [email protected]:6001.
The attempt to ping the endpoint failed.
<label for="testSelectWizard_ctl12_ctl06_ctl02_ctl06_tmmArrow">Tell
me more about this issue and how to resolve it</label>
Additional Details

Stop Mounted Spareseimages from appearing for other users

Hi
I have several user accounts on my Mac. Each ones does automated backups to a dedicated sparseimage file.
In other words, I have user accounts Tom, Mary, and Joe. I have a mounted network share for each user, Tom, Mary, and Joe. So when Joe logs in, Joe's network share is automatically mounted for him. That part works great.
In each network share, there's a sparseimage that each person backs up to. So Mary's home folder is backed to a sparseimage file on Mary's Network share. The same goes for Tom and Joe.
All of this is working great.
The only problem is this: If Joe is logged in, and his account is backing up, then his sparseimage file would be mounted on his desktop. (That's how it should be.) However, if while Joe is logged in and backing up, he steps away from the computer, and Mary logs in, Joe's mounted sparseimage will appear on Mary's desktop and she has full access to his backed up data.
If Joe has mounted a sparseimage, why does it appear on any other user's desktop who logs in? Why do they have access to it?
Once Joe is finished with his backup and the sparseimage is closed, it (correctly) disappears from all desktops.
Any help would be greatly appreciated.

sparseimage volumes mount like external hard drives. All users can see their contents. To restrict access to only one user, use the same procedure for doing this for an external hard drive: right click the mounted volume, Get Info, and change the permissions so that only the users you want have access.

Hide The Content Reference from Portal For specific users.

Hello Everyone
I am new to peoplesoft and want to hide the content reference from the main portal for specific users
Can anyone help me on this?
Thanks in advance...

the users should have roles which do not contain the permission lists to which your current component is added.
This is the way security is maintained!
Vikas

Exchange Server 2013 SP1 - Optimize for Single Server Use

Hello,
i've set up Exchange 2013 SP1 with at last CU6 - get exchangeserver says:
AdminDisplayVersion             : Version 15.0 (Build 995.29)
ExchangeVersion                 : 0.1 (8.0.535.0)    - - - funny number ;-) (is this an early version???)
Yes, the annoying 16028 in the application log are running every five minutes, but thats not the main question.
Which services are needed in a SINGLE-SERVER Environment, without DAG and unified messaging?
Can the Self-Checking, Health- and Self-Probing be put down?
These services are started automatic:
   Microsoft Exchange Active Directory Topology
   Microsoft Exchange Anti-spam Update
   Microsoft Exchange DAG Management
   Microsoft Exchange Diagnostics
   Microsoft Exchange EdgeSync
   Microsoft Exchange Frontend Transport
   Microsoft Exchange Health Manager
   Microsoft Exchange Mailbox Assistants
   Microsoft Exchange Mailbox Replication
   Microsoft Exchange Mailbox Transport Delivery
   Microsoft Exchange Mailbox Transport Submission
   Microsoft Exchange Migration Workflow
   Microsoft Exchange Replication
   Microsoft Exchange RPC Client Access
   Microsoft Exchange Search
   Microsoft Exchange Search Host Controller
   Microsoft Exchange Service Host
   Microsoft Exchange Throttling
   Microsoft Exchange Transport
   Microsoft Exchange Transport Log Search
   Microsoft Exchange Unified Messaging
   Microsoft Exchange Unified Messaging Call Router
   Microsoft Exchange-Informationsspeicher
   Microsoft Filtering Management Service
   Microsoft Online Services Sign-in Assistant
And with C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Queue\mail.que about 512 MBytes size (which may may be a designed default size)...
Have set up about 6 users mailboxes, 3 public folder in a mailbox for public folders. Only for testing purposes sent some (small) mails, no external mails received (only testing receive with 'popcon' for mail delivery to the internal boxes).
The server (2012 R2) is running only in the internal network (yes, with internet connection for updates).
No virus scanners, not third party receive or send connectors, only the 5 default (3 Frontend, 2 Hub) receive Connectors and one Send Connector to our mail provider set up and no user activity (only sometimes from me for testing).
It seems like it's doing only with itself, logging file sizes of above 11 GB (in 4 weeks), with huge amounts of probing, health checking, internal testing, internal updating etc.
Can this logging be set up to a lower level, can services be deactivated (for single server configuration),
the logging volume should be in a useful relation to the mail use of the server, a message for every self test, internal health check etc. in the log-files normally isn't useful, only when problems occur there is a need...
Thanks in advance
Andreas

Between Exchange protocol-based log files, PerfMon .blg files used by Managed Availability, IIS logs, etc., the total footprint can add up quickly and these logs are not purged automatically. You can take a look at this site below and use the powershell
script to clean it up.
http://www.c7solutions.com/2013/04/removing-old-exchange-2013-log-files-html

Restricting owa 2013 from internet for group users using ARR

Similar Messages

Maybe you are looking for