Missy, I would agree with you as the Exchange server would not update the NT account permission on the IS until the 2 hour replication cycle has initiate (unless of course you have change the reg entry down to 5min or something).
Cheers Paul Standards are like toothbrushes, everyone wants one but not yours -----Original Message----- From: Missy Koslosky [mailto:[EMAIL PROTECTED] Sent: 29 July 2003 18:14 To: Exchange Discussions Subject: Re: Permission Issue? My understanding (which may well be flawed, but hey, this is my very own understanding, ya know?) is that Exchange doesn't really care about this. But if you're seeing evidence to the contrary, I could well be wrong. ----- Original Message ----- From: "Blunt, James H (Jim)" <[EMAIL PROTECTED]> To: "Exchange Discussions" <[EMAIL PROTECTED]> Sent: Tuesday, July 29, 2003 1:01 PM Subject: RE: Permission Issue? Missy, In an NT 4.0 domain environment? I have the same environment as Scott has. Ex5.5 SP4 on a Win2000 SP2 machine, running in an NT 4.0 domain. The only difference is that they are using VPN...we are not at this time. However, we use one of our Help Desk temps occasionally to break up the boredom. We flip his network account between enabled and disabled every 20 minutes or so, for an hour or two, and depending on where the DC's are in their 15-minute refresh cycle, it can take as little as a minute for him to be locked out of everything. When he is locked out, the system asks him to put in his name and password every time he tries to send an e-mail and then subsequently denies his request. It also locks him out of any network connectivity. It does let him continue to use his workstation though. Scott...the only thing I can think of, is that you have changed the default refresh value for the DC's from 15 minutes to over an hour. -----Original Message----- From: Missy Koslosky [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 8:47 AM To: Exchange Discussions Subject: Re: Permission Issue? My understanding is that an open session remains open and that disabling the account will not impact that session. -----Original Message----- From: Scott Force [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 8:22 AM To: Exchange Discussions Subject: RE: Permission Issue? Somehow this user was able to send out an e-mail an hour after his account was disabled. I checked my VPN log and he logged on before he was fired but didn't log off until 3 hours after he was canned (and his account disabled). I was st00pid in assuming that the manager at that location would physically remove him from his PC. If you're saying no, that this is not possible, how else could he have done it? > Nope. > > But if you really want to be doubly sure, go modify his account and > put yourself as the only account on the mailbox with permissions and > set the Send/Receive limit to zero. > > -----Original Message----- > From: Scott Force [mailto:[EMAIL PROTECTED] > Sent: Tuesday, July 29, 2003 6:12 AM > To: Exchange Discussions > Subject: Permission Issue? > > > Windows NT4.0/6a domain running Exchange 5.5/4 single site. User is > primary windows NT account for his mailbox. User gets fired, I > disable his NT account. If the user was connected through a VPN at > 10:00AM and had his Outlook XP client open, then at 11:00AM I disabled > his account and he never closed the application or disconnected from > his VPN connection, would he still be able to send e-mail? TIA, Scott > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode > =&lang > =english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] *********************************************************************************************** The information contained in this message or any of its attachments may be confidential and is intended for the exclusive use of the addressee(s). Any disclosure, reproduction, distribution or other dissemination or use of this communication is strictly prohibited without the express permission of the sender. The views expressed in this email are those of the individual and not necessarily those of Sony or Sony affiliated companies. Sony email is for business use only. This email and any response may be monitored by Sony United Kingdom Limited. (gfd) *********************************************************************************************** _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
