Restriction user to access owa outside the organization

I need a policy that a specific group of user, they can access owa in inside the organizational network but when they go outside they cannot access owa outside network.
if possible please suggest

Hi,
Based on my research, we can block selected Users external OWA access by change the files
startpage.aspx and basicmessageview.aspx
For more information, you can refer to the following article:
http://blog.leederbyshire.com/2012/11/27/block-or-allow-selected-users-depending-on-location-in-microsoft-exchange-2010-outlook-web-app/
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make
sure that you completely understand the risk before retrieving any suggestions from the above link.
Thanks,
Angela Shi
TechNet Community Support

Similar Messages

  • Is it possible to restrict user to send mail outside the company?

    Hi,
    When deploy beehive locally for my company, I would like to know is it able to restrict user from sending mail outside the company?
    Please give some infomation about that
    Thanks

    hlthanh,
    would you like to restrict particular users or all users as a whole?
    ["Managing Oracle Beehive E-mail Components"|http://download.oracle.com/docs/cd/E16671_01/bh.200/e16648/email.htm#BABBIFII] has details on configuration options.
    Most installations will consider fronting a postfix or sendmail MTA, adding further control options.
    HTH, Tom

  • How can I restrict access to cloud storage from Creative Cloud? We don't want our users putting files outside the organization.

    We need to restrict our users from storing files outside the organization. How can we restrict this capability?

    They have Cs6, however I need to have my own copy, and the highest I can go with my system is CS5, maybe even 5.5. I've a small budget, and most copies are being sold for massive amounts because they're like collector items. I've seen the ones actually affordable within my range from sellers that arent trustworthy, or they're updates which I can't use. I had Cs2, but with updates to operating systems they stopped working. Thank you for your kind assistance.

  • PROBLEM ACCESSING OWA FROM THE INTERNET TO THE CHILD DOMAIN MAIL SERVER.

    Dear All,
    Referring to the forum that I sent to the group sometime back which was successfully sorted. I have received a call from the users in the child domain, where they are not able to access OWA from the Internet. below is the error they are getting
    Log OffOutlook Web Access could not connect to Microsoft Exchange. If the problem continues,
    contact technical support for your organization.Click here to continue working.RequestUrl:
    https://mail.mydomain.com:443/owa/forms/basic/BasicReadMessage.aspx?ae=Item&t=IPM.Note&id=
    RgAAAADaPzSfz396RJbcAffXnu8fBwCXRKkddfkskskZ0zGXAAAAACF9AACXRKFoskTMSrrSWkkksAAAACgcAAAJUser: mynameEX Address: /o
    =First Organization domain/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=myname1SMTP Address:
    [email protected]
    version: 8.3.348.2ExceptionException type:Microsoft.Exchange.Data.Storage.ConnectionFailedTransientExceptionException
    message: Cannot open mailbox /o=First Organization domain/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/
    cn=Recipients/cn=myname1.Call stackMicrosoft.Exchange.Data.Storage.ConnectionCachePool.OpenMailbox(String serverDn,
    String userDn, String mailboxDn, Guid mailboxGuid, Guid mdbGuid, Object identity, ConnectFlag connectFlag, OpenStoreF
    lag openStoreFlag, CultureInfo cultureInfo, String clientInfoString, Boolean secondTry)Microsoft.Exchange.Data.Storage.
    ConnectionCachePool.OpenMailbox(String serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid mdbGuid, Object
    identity, ConnectFlag connectFlag, OpenStoreFlag openStoreFlag, CultureInfo cultureInfo, String clientInfoString,
    Boolean secondTry)Microsoft.Exchange.Data.Storage.MailboxSession.Connect()Microsoft.Exchange.Clients.Owa.Core.
    UserContext.get_MailboxSession()Microsoft.Exchange.Clients.Owa.Basic.OwaForm.OnLoad(EventArgs e)Microsoft.Exchange.
    Clients.Owa.Basic.ReadMessage.OnLoad(EventArgs e)System.Web.UI.Control.LoadRecursive()System.Web.UI.Page.
    ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)Inner
    ExceptionException type: Microsoft.Mapi.MapiExceptionNetworkErrorException message: MapiExceptionNetworkError:
    Unable to make connection to the server. (hr=0x80004005, ec=2423) Diagnostic context: ...... Lid: 13720 dwParam:
    0x6BA Msg: EEInfo: Flags: 0 Lid: 11672 dwParam: 0x6BA Msg: EEInfo: NumberOfParameters: 0 Lid: 16280 dwParam: 0x6BA
    Msg: EEInfo: ComputerName: n/a Lid: 8600 dwParam: 0x6BA Msg: EEInfo: ProcessID: 18036 Lid: 12696 dwParam: 0x6BA Msg:
    EEInfo: Generation Time: 2014-12-12 12:01:11:86 Lid: 10648 dwParam: 0x6BA Msg: EEInfo: Generating component: 18 Lid:
    14744 dwParam: 0x6BA Msg: EEInfo: Status: 11004 Lid: 9624 dwParam: 0x6BA Msg: EEInfo: Detection location: 320 Lid:
    13720 dwParam: 0x6BA Msg: EEInfo: Flags: 0 Lid: 11672 dwParam: 0x6BA Msg: EEInfo: NumberOfParameters: 1 Lid: 8856
    dwParam: 0x6BA Msg: EEInfo: prm[0]: Unicode string: MX4 Lid: 19778 Lid: 27970 StoreEc: 0x977 Lid: 17730 Lid: 25922
    StoreEc: 0x977 Call stackMicrosoft.Mapi.MapiExceptionHelper.ThrowIfError(String message, Int32 hresult, Int32 ec,
    DiagnosticContext diagCtx)Microsoft.Mapi.ExRpcConnection.Create(ConnectionCache connectionCache,
    ExRpcConnectionCreateFlag createFlags, ConnectFlag connectFlags, String serverDn, String userDn, String user,
     String domain, String password, String httpProxyServerName, Int32 ulConMod, Int32 lcidString, Int32 lcidSort,
    Int32 cpid, Int32 cReconnectIntervalInMins, Int32 cbRpcBufferSize, Int32 cbAuxBufferSize)
    Microsoft.Mapi.ConnectionCache.OpenMapiStore(String mailboxDn, Guid mailboxGuid, Guid mdbGuid,
    ClientIdentityInfo clientIdentity, String userDnAs, OpenStoreFlag openStoreFlags,
    CultureInfo cultureInfo, String applicationId)Microsoft.Mapi.ConnectionCache.
    OpenMailbox(String mailboxDn, Guid mailboxGuid, Guid mdbGuid, WindowsIdentity
    windowsIdentityAs, String userDnAs, OpenStoreFlag openStoreFlags, CultureInfo cultureInfo,
    String applicationId)Microsoft.Exchange.Data.Storage.ConnectionCachePool.OpenMailbox(String
    serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid mdbGuid, Object identity,
    ConnectFlag connectFlag, OpenStoreFlag openStoreFlag, CultureInfo cultureInfo, String clientInfoString,
    Boolean secondTry)
    Your Usual support will b greatly appreciated.
    Regards
    Michael

    Hello,
    Edge server is not used for client comunication (OWA, ActiveSync etc). You should configure firewall rules to point to your CAS server or (more secure method) reverse proxy.
    Hope it helps,
    Adam
    www.codetwo.com
    If this post helps resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered, or Helpful you help others
    find the answer faster.

  • Cisco Unity Connection not relaying voicemails outside the organization

    Hi all, we are running Cisco Unity Connection version: 8.6.2ES25.21900-25.  It has been set up to accept voicemails for Exchange 2010 users (in other words email messages with WAV attachments) and deliver these to their inboxes; this works with no problem.
    I have two users who would like to receive these emails at their outside account, however the messages are never sent.  I have tried the following:
    Changed the users corporate email addresses from "[email protected]" to "[email protected]"
    Unchecked the option to "Generate SMTP Proxy Address From Corporate Email Address."
    On the "Message Actions" page for their account I have configured voicemail and email to "Relay the message" and entered their external SMTP addresses.
    Confirmed the smart host setup is OK (points to our Exchange 2010 CAS which has firewall rules in place to permit it to send mail outside the organization.
    Confirmed the Exchange 2010 CAS will accept SMTP messages from the subnet the Unity Connection server resides in.
    If I switch the user SMTP settings BACK to their original internal SMTP addresses for my company the messages are then immediately delivered properly to these addresses.  This signifies to me that Unity is periodically trying to send these items but they just aren't going out.  No sign of the messages in any user report I ran in Unity nor message tracking in Exchange.
    I also tried setting up an Outlook rule to forward these voicemail messages to the recipients external addresses but this did not work and after doing some research I see that the way in which Unity delivers the messages to these recipients internally (via EWS) is the reason why.  I wonder if this is the same reason these are not going out to their external SMTP addresses.
    Thanks for any assistance provided!

    Look at the transfer options for that particular user and make sure it's set to ring the phone, that configuration is PER user.
    HTH
    java
    if this helps, please rate
    www.cisco.com/go/pdihelpdesk

  • Exchange 2013 Sp1 some users cant access owa

    After I install new exchange 2013 with sp1 on windows 2012 R2 server one for mail boxes and the second Client Access, i move all mail boxes to it, then i uninstall  the old server (exchange 213 with cu3).
    All may exchange server’s virtual machines on hyper-v 2012R2
    I install certificate and configure virtual directories
    I notice some users can’t open there mail boxes from OWA they get a blank page after the enter username and password (from internal and external) (the same users can open outlook anywhere) at the same times many users can access owa.
    After many restarts they can access OWA.
    After some days some other users can’t access owa.
    I remove ECP and OWA virtual directories, Then Recreate and configure it.
    But the same problem some users cant access owa 
    I install a new client access server, configure it
    But the same problem

    HI 
    YOu can check below things to resolve the problem
    Disable SSL from Default Web Site if you have enabled them
    Check if you have set any redirection in the Default Website if so remove redirection and see the results
    Ensure that you have a valid certificate for owa VD
    check correctly the authentication type - windows authentication is enabled or if you have form based authentication enabled
    Below is an example for enabling WA
    set-Owavirtualdirectory -identity "servername\owa (Exchange Back End)" -WindowsAuthentication $True -Basicauthentication $false -Formsauthentication $false
    Set-EcpVirtualDirectory -Identity "servername\ecp (Exchange Back End)" -WindowsAuthentication $true -FormsAuthentication $false 
    Remember to mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you

  • Access SharePoint outside the network

    Please correct my if I'm wrong or if there are other ways to access SharePoint outside the network with AD authentication
    Option 1 - Internal SharePoint Server. Configure reverse proxy and punch a hole in the firewall to access it outside network
    Option 2- Setup SharePoint server in the DMZ then configure 1 way trust in the Internal Domain Controller
    Option 3 - If both above are not doable setup a UAG in the DMZ 
    Is there another option that I'm missing ? I'm really looking on implementing Option 1 or 2 but some of the network team doesn't want to punch a hole in the firewall or configure a trust (option 2), but without the trust the only way you can authenticate is
    FBA correct?
    Thanks in advance
    AJ MCTS: SP 2010 Configuration MCSA: Windows 7 If you find this post useful kindly please mark it as an answer :) TY

    Hi,
    According to your post, my understanding is that you wanted to access SharePoint outside the network.
    You need to set up a zone with Forms Based Authentication for the people not on the domain
    Here is a similar thread for your reference:
    http://stackoverflow.com/questions/1783884/giving-access-to-sharepoint-site-for-people-outside-organization
    More information:
    Configuring Forms Based Authentication in SharePoint 2010
    Claims Walkthrough: Creating Forms-Based Authentication for Claims-Based SharePoint 2010 Web Applications Using ASP.NET SQL Membership and Role Providers
    Best Regards,
    Linda Li
    Linda Li
    TechNet Community Support

  • Problems while accessing images outside the web document-root folder

    Our application runs on Oracle application server on Linux. Facing problems while accessing images outside the web document-root folder. This works with changes in global-web-application.xml by including the <virtual-directory> tag. The same change does not work when done on Linux machine. It is unable to find the image. Please help in resolving this issue.
    </locale-encoding-mapping>
    </locale-encoding-mapping-list>
    </web-app>
    <virtual-directory virtual-path="/img" real-path="/home/eposuat/" />
    </orion-web-app>
    Code in the jsp:
    <img width=700 height=700 src="/img/3.tif"></img>
    <img width=700 height=700 src="/img/WB.gif"></img>

    This is one of the least satisfactory aspects of site management in Dreamweaver, and several developers, including myself, have been pressuring the Dreamweaver team for some years to improve this. Who knows? They might eventually take notice.
    The only way to do this at the moment is to create two site definitions, one nested inside the other. Set up the site definition normally based on htdocs as your site root. Then create a new site definition based on site. Dreamweaver will nag you that it can cause problems, but it won't actually stop you from doing it. The only potential problem is with site synchronization.
    The problem with using site as the only basis for your site definition is that Dreamweaver automatically puts things like the Connections, Scripts, and other folders in the site root. So, everything ends up at the wrong level of the site hierarchy. Quite frankly, the whole thing is a bit of a pain. Dynamic site development was added to Dreamweaver only in version 6 (Dreamweaver MX), and no one had really thought through the need to store files outside the site root.

  • Exchange 2010 does not send mail outside the organization

    Hi,
    I have an issue with my Exchange 2010 server and the issue is that I cannot send messages outside the organization. There are lot of posts regarding this issue, but in my case the issue is a little bit different and I didn't find an answer. There is properly
    configured send connector, DNS records are OK, external domain is properly configured, all Exchange services are started. The server is running on VM with 4 virtual CPUs, 32GB of RAM. When I send a message to ouside domain the message is not delivered.
    I have enabled protocol logging (SMTP logging) and there are no records in the log. What I found is that when I reboot the server, immediately after restart I am able to send an email to outside domain, few minutes later the messages, addressed to the
    same outside domain are not being delivered.
    The VM is created on LUN, presented from storage Fujitsu Eternus DX90S2, communication between the storage and the host is through iSCSI, all the disks on the storage are 2TB, SATA, 7200rpm.
    I can't explain to myself what is going on.

    No, unfortunately I do not receive NDR, the queue is empty as well. However, I am receiving a message from Exchange and it states that the message, sent to external domain is not yet delivered and the server will continue to try to deliver it, there is no
    reason specified for delaying. The message is:
    Generating Server: exchange.domain.local
    My_Email_Is_Here
    #550 4.4.7 QUEUE.Expired; message expired ##

  • How to restrict users to access the files directly from /irj/go/km/docs/doc

    Dear Experts,
    I have made a folder in KM where I have saved some files, and also I have made a application from where user can access those files.
    But the users are able to access the files by directly typing the path of the file in internet explorer, I have to restrict it that the user should not be able to access the files directly.
    Please give your helpful suggestions.
    Warm Regards
    Upendra Agrawal
    Edited by: Upendra Agrawal on May 15, 2009 4:49 PM

    Hello,
    You can have a link/button react to a mouse clic by reading the KM document and putting it on the htpp flux with the correct header (this is the same kind of code that is used when you generate the pdf). As the file access is in you server-code, user will not have access to the URL...
    an exemple for the WD Java (coming from this [PDF|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d0cc41cb-9576-2b10-99a6-ab90ef28c73b]), with slight modifications :
    public void exportToPDF( ) {
       //@@begin exportToPDF()
       ByteArrayOutputStream outputStream = null;
       outputStream = new ByteArrayOutputStream();
       // read the file with KM API and copy it to the outputStream
       showPopUp(WDWebResourceType.PDF, outputStream, "PDF Out Put");
       outputStream.close();
    //@@end
    regards
    Guillaume

  • We are using version 3.6 on several machines. Is there a way to restrict users from accessing the about:config page?

    Prevent users from making modifications to the about:config page?

    You can do this with the [https://addons.mozilla.org/en-US/firefox/addon/3911/ Public Fox] add-on.
    It can be used to password protect access to about:config. To prevent the user from disabling/uninstalling the add-on, it also allows you to password protect the add-ons manager. You can also lock down other parts of Firefox such as the options dialog and clear history.

  • How can i restrict user to access database object (procedure) or JSP

    Hi
    I have 9ias infrastructure 902, on win2k box with 9i DB.
    and I have one PL/SQL web application and another J2EE application both are hosted by 9ias 902.
    Now we are looking forward to couple both with SSO.
    I have deloyed samples of both and works fine.
    Each application have different set of users, i mean there is no common user.
    How can i restrict user not to view the web page which is not authorised to them.
    as far as i understand from the Grocery demo is pick the role (which is a string only) from OID and programaticall apply security via if else endif construct.
    can any one through light upto my concern.
    regards
    [email protected]

    Hey Mary
    No i haven't try to do that via pl/sql....
    as the our application is j2ee app... deployed in oc4j.. with sso and ldap....
    still finding to do so....
    what i have realized that LDAP is just to store user information in inverted tree... and one have to build separated access security mechnisum that will be applicable to j2ee system....
    thanx...
    samir....

  • Help needed restricting users admin access to devices using ACS 4.2

    I have users that access the network via a VPN client to a PIX 515 which authenticates to the ACS (using the default group for unknown users) which uses an external Active Directory Database.
    The problem I have is that as the ACS authenticates these users, it now allows them admin access to the PIX. How do I restrict access? I have looked at NARs using the 'All AAA clients, *, *' approach but that just stops their VPN access. ( I have a separate group called 'PIX ACCESS' which will contained only defined users for admin access).
    Incidentally I have other devices on the network which are AAA clients, in particular Nortel switches. I can set the group settings for that RADIUS set up to 'Authenticate Only' (RADIUS Nortel option) and that works fine, I was expecting the ACS to have a similar setting for TACACS+.
    So how do I allow the unknown users to authenticate to their AD database but restrict them admin access to the AAA clients?

    Very common problem. I've solved it twice over the last 6 years with ACS. I'm sketchy on the details. But here goes. First option to explore is using RADIUS for VPN access, then TACACS on all the Cisco switches and PIX firewall. That would make it alot easier. I think that with TACACS, you can build a NAR based on TCP port number instead of IP address....
    http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_tech_note09186a0080858d3c.shtml
    So you'd have a group with 3-4 Administrators that can access PIX CLI, and another group of VPN users that can't access the PIX but can VPN in. So on the VPN group, put a NAR that restricts access to SSH/Telnet TCP ports?
    This comes up everytime I install an ACS server, (every 2-3 years), and it's always a trick.
    Please let me know if this works for you. And if it doesn't, let us know how you fixed it. I think I can get back into the ACS I last did this with and take a look, but I'd have to call up and make a special trip.

  • Restrict User to access/fetch data in back date

    Hi All,
    As financial year is about to close, one of my clients has requirement that for all t-codes, user must be having restriction to access or fetch the data in back date or till 31st March, he won't be able to access it. So my ques is can we do it at authorization level or from basis end.?
    If no, then how it would be possible?
    But they want only 3 users out of all should have access.
    Guida me for the same.
    Regards
    Disha

    Hi ,
    As per standard behaviour of the system you wount be able to achieve what you are looking for .
    As the system does not allow user to be restricted based on period for reports .
    You can check for either BADI or exits / Enhancement points for restricting but that too based on which t codes you want to restrict . It would be T code based like you identify the T codes and accordingly make the enhancements .
    Cheers ,
    Dewang

  • Accessing files outside the root of the site.

    Hi All
    On my web host space I have access to a directory outside the
    root of the
    website i.e. "private"
    I want to store files there for download after users have
    purchased them.
    I want to put them here to stop people ripping the files off
    by guessing the
    link or useing a website copier.
    What I plan to do is send a link to the user via email, this
    link will then
    go to a download page which records the user has accessed the
    file and then
    have the page automatically download the file.
    I can do this no problem if I have the files in a directory
    under the root
    of the site but how can I link to the files outside the root?
    TIA
    Bren
    Why do I climb mountains? Simple! because they are there
    www.3peakschallenge.co.uk

    Sorry forgot to mention I am using ASP VB
    Cheers
    Bren
    "Bren" <[email protected]> wrote in message
    news:ejgd9n$427$[email protected]..
    > Hi All
    >
    > On my web host space I have access to a directory
    outside the root of the
    > website i.e. "private"
    > I want to store files there for download after users
    have purchased them.
    > I want to put them here to stop people ripping the files
    off by guessing
    > the link or useing a website copier.
    > What I plan to do is send a link to the user via email,
    this link will
    > then go to a download page which records the user has
    accessed the file
    > and then have the page automatically download the file.
    > I can do this no problem if I have the files in a
    directory under the root
    > of the site but how can I link to the files outside the
    root?
    >
    > TIA
    > Bren
    > --
    > Why do I climb mountains? Simple! because they are there
    > www.3peakschallenge.co.uk
    >

Maybe you are looking for