Disabling the updating of Active Directory attributes via OWA 2010
I've been poking around here and some other forums for a few days, and my search-fu has failed me. I've read in this thread (http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/263b7090-9593-4101-a70a-b51ee4cd0ca3) which suggests users to be able to edit their own information, but in a case like mine, we would like to completely remove the users ability to do such. We have many web apps that were developed in house that rely on the many different attributes in the GAL/AD for reporting and tracking of users info and accounts, and have already had some users changing their info, thus throwing off reports and various training modules that tie-in to the users accounts. Does anyone know how to completely disable this option, domain wide?
August 22nd, 2011 9:56pm

If you want to simply modify the default Assignment Policy, logon to OWA/ECP/Options and access the Default Assignment dialog box ( Under Groups/My Organization/Roles and Auditing/User Roles) and uncheck the ability there. Alternatively, create a new Default Assignment Policy with that ability removed and assign that policy to appropriate users.
Free Windows Admin Tool Kit Click here and download it now
August 22nd, 2011 10:24pm

I've been poking around here and some other forums for a few days, and my search-fu has failed me. I've read in this thread (http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/263b7090-9593-4101-a70a-b51ee4cd0ca3) which suggests users to be able to edit their own information, but in a case like mine, we would like to completely remove the users ability to do such. We have many web apps that were developed in house that rely on the many different attributes in the GAL/AD for reporting and tracking of users info and accounts, and have already had some users changing their info, thus throwing off reports and various training modules that tie-in to the users accounts. Does anyone know how to completely disable this option, domain wide? So you dont't want users to be able to access the ECP via OWA? for single user, run cmdlets "Set-CASMailbox -ECPEnabled $false"; for domain wide, I think you may change the permission settings in ECP virtual directory. Please have a try and let me know if there is any questioisn. for more information, see http://blogs.technet.com/b/exchange/archive/2010/09/23/3411146.aspx. Hope it is helpful. Fiona
August 24th, 2011 5:05am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics