none
How to Disable ECP access to a specific user RRS feed

  • Question

  • HI, given the excessive options given to the "administrator" (domain administrator) acount in ECP (for example wipe any phone etc.) i would like to disable it's access to ECP (if possible, only from outside the comapny, from inside it can still access it). 

    Does anyone know of a way to do it?

    i assume it would envolve changing RBAC permissions, but which ones? and how do i make it so it will not effect its other permissions such as administering the EMC, EMS etc. 

    p.s. diabling OWA access is not enough cause ECP can still be accessed driectly y entering the url /ecp...

     

    Thank you!
    Gil.

     

     

    Wednesday, August 24, 2011 11:41 AM

Answers

  • Thanks. but isnt there a way to revent a user from loggin in to the ECP all together - not just removing certain features in it?

    Yes, you can totally disable ECP from a user just by running: Set-Casmailbox -id <ALIAS> -ECPEnabled $False
    Martina Miskovic
    • Marked as answer by Gil Kremer 2 Wednesday, August 24, 2011 12:49 PM
    Wednesday, August 24, 2011 12:42 PM

All replies

  • http://blogs.technet.com/b/exchange/archive/2010/03/04/3409445.aspx

    Please go through this artcle.. might be helpful to you


    "Abhi" "Exchange Specialist" ------------- Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Wednesday, August 24, 2011 11:45 AM
  • you can use webapp policy to do that
    http://technet.microsoft.com/en-us/library/dd335191.aspx
     

    Regards, Mahmoud Magdy Watch Arabic Level 300 Videos about Exchange 2010 here: http://vimeo.com/user3271816 Read pretty advanced Exchange stuff I post here: http://www.enowconsulting.com/ese/blog.asp, follow my blog: http://autodiscover.wordpress.com , corp blog: http://ingazat.wordpress.com, Follow me on twitter http://www.twitter.com/_busbar and if you Liked my post please mark it as helpful and accept it as an answer
    Wednesday, August 24, 2011 11:46 AM
  • Great idea - only i dont see any option to disable ECP specifacly but rather disable OWA which, as i mentioned before doesnt diable ECP
    Wednesday, August 24, 2011 12:19 PM
  • Thanks. but isnt there a way to revent a user from loggin in to the ECP all together - not just removing certain features in it?
    Wednesday, August 24, 2011 12:23 PM
  • Thanks. but isnt there a way to revent a user from loggin in to the ECP all together - not just removing certain features in it?

    Yes, you can totally disable ECP from a user just by running: Set-Casmailbox -id <ALIAS> -ECPEnabled $False
    Martina Miskovic
    • Marked as answer by Gil Kremer 2 Wednesday, August 24, 2011 12:49 PM
    Wednesday, August 24, 2011 12:42 PM
  • YES! thats exactly what i was looking for! Thanks :)
    Wednesday, August 24, 2011 12:50 PM