We have a Windows server 2003 active directory environment and Exchange server 2003. I am trying to setup an e-mail account for a new sales representative who will only be accessing his e-mail through OWA. We do not want him to have the ability to log onto any of our workststions locally. I tried setting up his account using the "logon to" restrictions and adding the server that hosts Exchange to the list of computers he is authorized to logon to. However that does not work, when trying to access OWA weget the logon prompt followed by "page cannot be displayed" error" after entering the username and password. This happens as long as there are any restrictions listed. In order to get OWA to work for him I have to leave his account unrestricted. I have also tried using using the editting the default domain policy adding that user to the Deny Logon Locally policy under Deault Domain Policy/Computer Configuration/Windows Settings/Security Settings/Local Policies/User Rights Assignment. That change did absolutely nothing. Am I going about this all worng? Can anyone help me resolve this situation? JeanD

Hi,Have you tried to add user to policy below:"Deny logon locally""Deny logon through Terminal Services"Regards,Xiu

Hi,Have you tried to add user to policy below:"Deny logon locally""Deny logon through Terminal Services"Regards,Xiu Yes I have tried that and it had no effect at all.