locked
Restrict some users from access Exchange OWA at home from Forefront UAG RRS feed

  • Question

  • Hello,

    In our Exchange 2013 environment, there are two Forefront UAG servers which publish OWA, Outlook Anywhere to Internet.

    The customer has a requirement, the abc security group can only visit mail at company. Out of company mail access is forbidden.

    I found in the publish application, there is a Authentication tab. the currently setting is "All authenticated users" allowed.

    Can I change the setting below to get the goal?

    Authenticated users    Allow

    ABC group                 Deny

    I think that should be fine, but I don't have test servers to have a test.

    Any input will be highly appreciated.


    Best regards,

    Robert Li
    Partner Online Technical Community
    -----------------------------------------------------------------------------------------
    We hope you get value from our new forums platform! Tell us what you think:
    http://social.microsoft.com/Forums/en-US/partnerfdbk/threads
    ------------------------------------------------------------------------------------------
    This posting is provided "AS IS" with no warranties, and confers no rights.

    Monday, July 6, 2015 12:33 AM

Answers

  • Yes, that's exactly what you need.

    I guess your UAG portal publish other applications than the email OWA, so make sure that the Portal Application (In the list of applications of UAG) Authorization is open to all users then per each application in the portal control it with its Authorization TAB as per your earlier screen shot.

    Wednesday, December 2, 2015 10:51 AM
  • Hello, 

    Yes that should be sufficient, for more information you can use the link below.

    https://technet.microsoft.com/en-us/library/ee406224.aspx?f=255&MSPPError=-2147217396#BKMK_Authorization

    Let me know, how it goes.

    P.S: Please mark as answer or Vote as helpful if you find so. 

    Wednesday, July 15, 2015 12:25 PM

All replies

  • any idea on this?

    Best regards,

    Robert Li
    Partner Online Technical Community
    -----------------------------------------------------------------------------------------
    We hope you get value from our new forums platform! Tell us what you think:
    http://social.microsoft.com/Forums/en-US/partnerfdbk/threads
    ------------------------------------------------------------------------------------------
    This posting is provided "AS IS" with no warranties, and confers no rights.

    Monday, July 13, 2015 1:05 AM
  • Hello, 

    Yes that should be sufficient, for more information you can use the link below.

    https://technet.microsoft.com/en-us/library/ee406224.aspx?f=255&MSPPError=-2147217396#BKMK_Authorization

    Let me know, how it goes.

    P.S: Please mark as answer or Vote as helpful if you find so. 

    Wednesday, July 15, 2015 12:25 PM
  • Yes, that's exactly what you need.

    I guess your UAG portal publish other applications than the email OWA, so make sure that the Portal Application (In the list of applications of UAG) Authorization is open to all users then per each application in the portal control it with its Authorization TAB as per your earlier screen shot.

    Wednesday, December 2, 2015 10:51 AM