We have a need to allow certain users Outlook Web Access (OWA) only. We don't want these users to be able to log in to a machine and we don't want them to be able to log in via a Citrix session, only OWA. Does anyone have any experience or ideas on limiting that access?Thanks,George Phillips

In Exchange 2003 you need to use ADSIEdit.msc to modify protocole settings attribute of user or ADModify.net to enable/disable for bulk users. In Exchange 2007 you can do so in Mailbox Feature or with Set-CASMailbox cmdlet. Exchange 2003:http://www.msexchange.org/tutorials/New-MAPI-Access-feature-Exchange-Server-2003-Service-Pack2.html Exchange 2007:http://technet.microsoft.com/en-us/library/bb124497.aspxAmit Tank | MVP - Exchange | MCITP:EMA MCSA:M | http://ExchangeShare.WordPress.com

The thread below solved my issue. Thanks!Domain Security for External OWA Usershttp://social.technet.microsoft.com/forums/en-US/winserversecurity/thread/5f821b9b-cd4f-4556-bc40-f0584790bcd4