pharaoh fortune slot
ExamNotes.net
Welcome, Guest. Please login or register.
November 25, 2017, 07:22:52 AM

Login with username, password and session length
* Home Help Search Login Register
+  ExamNotes.net
|-+  Microsoft (MCSE, MCSD, MOUS, MCAD)
| |-+  MCSE elective exams
| | |-+  Exchange server 2000
| | | |-+  How To Generate List Of Users With OWA Access
0 Members and 1 Guest are viewing this topic. « previous next »
Pages: [1] Print
Author Topic: How To Generate List Of Users With OWA Access  (Read 2070 times)
kelvin1211
Member

Offline Offline

Posts: 40

0


View Profile WWW
« on: January 12, 2004, 03:07:14 AM »

Dear fellow admins,

Anyone has any idea on how to display the names of users in Active Directory who have OWA enabled/disabled?

I have been tasked to find out which of the users currently have OWA access. There is no way to who has the HTTP protocol enabled.

The query in AD does not allow one to search for a attribute called protocol.

Pls kindly advise if you have any indication on how best to resolve the following situation.

Thank you!

Kelvin



Report this post to
Logged
jeff_j_black
that's what "THEY" said..
Hero Member
*****
Offline Offline

Posts: 2723

2


View Profile
« Reply #1 on: January 12, 2004, 12:53:42 PM »

I am not aware of any per user attribute that is going to give you this information in one tidy list. Pretty much anyone can access owa from anywhere provided they have permissions, that same permissions that they need to access their inbox through Outlook. Perhaps you could use the logging functionality within IIS?

Are you concerned about users accessing from inside the network or from the outside? Maybe you can block ports or filter addresses that can have access to the OWA website and see who screams? Most of what you need to do will likely be done through administration of IIS instead of AD and Exchange.

HOW TO: Enable IIS Logging Site Activity in Windows 2000
« Last Edit: January 12, 2004, 12:58:13 PM by jeff_j_black » Logged
kelvin1211
Member

Offline Offline

Posts: 40

0


View Profile WWW
« Reply #2 on: January 12, 2004, 10:17:15 PM »

Hi Jeff,

Thanks for the heads up. What we are trying to do here is to identify users within our domain who has the HTTP protocol enabled in Exchange. We intend to convert a subset of these users to Citrix and disable their OWA access.

Unfortunately, the previous administrator did not document who has OWA enabled as only 1/3 of our users in my company are allowed to use it.

The problem is, with a few hundred users around, it would be extremely tedious to check each entry one at a time in AD, hence the need to identify by attribute so that the necessary can be done.

Should you happen to think of any potential ways of resolving this, do let me know.

Cheers
Kelvin
Logged
jeff_j_black
that's what "THEY" said..
Hero Member
*****
Offline Offline

Posts: 2723

2


View Profile
« Reply #3 on: January 13, 2004, 12:17:24 PM »

Active Directory Schema
I did not have time to dig too deep into this, but it looks promising?
Logged
kelvin1211
Member

Offline Offline

Posts: 40

0


View Profile WWW
« Reply #4 on: January 13, 2004, 10:07:05 PM »

I just found this LDAP query that can do the job. Run from AD and voila. all users with HTTP protocol enabled are shown.

(objectcategory=user)(ProtocolSettings=*http?1?1?*)

Both are on the same line.

Cheers!


Smiley
Logged
jeff_j_black
that's what "THEY" said..
Hero Member
*****
Offline Offline

Posts: 2723

2


View Profile
« Reply #5 on: January 13, 2004, 10:17:11 PM »

Thanks for the info, where did you locate it?
Logged
kelvin1211
Member

Offline Offline

Posts: 40

0


View Profile WWW
« Reply #6 on: January 13, 2004, 11:01:56 PM »

I happened to stumble upon the below article.
Was getting frustrated when lady luck smiled on me.

Good point made by the guy about LDP tool though.

Thanks for your kind help!

http://www.mcpmag.com/columns/article.asp?EditorialsID=638
Logged
jeff_j_black
that's what "THEY" said..
Hero Member
*****
Offline Offline

Posts: 2723

2


View Profile
« Reply #7 on: January 14, 2004, 11:18:47 AM »

Good ol' MCP Mag. We're not running Exchange 2000 in production here yet and I have taken my Windows 2000/Exchange 2000 servers off of the lab for the moment, while I prepare for 70-296, so it is frustrating trying to delve into some of these deeper questions. Best of luck and thanks for the info!
Logged
kelvin1211
Member

Offline Offline

Posts: 40

0


View Profile WWW
« Reply #8 on: January 14, 2004, 02:22:37 PM »

You are most welcome! With this constantly evolving technological circle, the quest for learning is endless and its through sharing of knowledge that we all get better..Its great to have regulars like yourself on this excellent newsgroup helping others in need Smiley

All the best for your upcoming 70-296! You can smell the MCSE 2003 coming your way soon..
Logged
Pages: [1] Print 
« previous next »
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.13 | SMF © 2006-2011, Simple Machines LLC Valid XHTML 1.0! Valid CSS!