RE: Permission Issue?
Missy, I would agree with you as the Exchange server would not update the NT account permission on the IS until the 2 hour replication cycle has initiate (unless of course you have change the reg entry down to 5min or something). Cheers Paul Standards are like toothbrushes, everyone wants one but not yours -Original Message- From: Missy Koslosky [mailto:[EMAIL PROTECTED] Sent: 29 July 2003 18:14 To: Exchange Discussions Subject: Re: Permission Issue? My understanding (which may well be flawed, but hey, this is my very own understanding, ya know?) is that Exchange doesn't really care about this. But if you're seeing evidence to the contrary, I could well be wrong. - Original Message - From: Blunt, James H (Jim) [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 1:01 PM Subject: RE: Permission Issue? Missy, In an NT 4.0 domain environment? I have the same environment as Scott has. Ex5.5 SP4 on a Win2000 SP2 machine, running in an NT 4.0 domain. The only difference is that they are using VPN...we are not at this time. However, we use one of our Help Desk temps occasionally to break up the boredom. We flip his network account between enabled and disabled every 20 minutes or so, for an hour or two, and depending on where the DC's are in their 15-minute refresh cycle, it can take as little as a minute for him to be locked out of everything. When he is locked out, the system asks him to put in his name and password every time he tries to send an e-mail and then subsequently denies his request. It also locks him out of any network connectivity. It does let him continue to use his workstation though. Scott...the only thing I can think of, is that you have changed the default refresh value for the DC's from 15 minutes to over an hour. -Original Message- From: Missy Koslosky [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 8:47 AM To: Exchange Discussions Subject: Re: Permission Issue? My understanding is that an open session remains open and that disabling the account will not impact that session. -Original Message- From: Scott Force [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 8:22 AM To: Exchange Discussions Subject: RE: Permission Issue? Somehow this user was able to send out an e-mail an hour after his account was disabled. I checked my VPN log and he logged on before he was fired but didn't log off until 3 hours after he was canned (and his account disabled). I was st00pid in assuming that the manager at that location would physically remove him from his PC. If you're saying no, that this is not possible, how else could he have done it? Nope. But if you really want to be doubly sure, go modify his account and put yourself as the only account on the mailbox with permissions and set the Send/Receive limit to zero. -Original Message- From: Scott Force [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 6:12 AM To: Exchange Discussions Subject: Permission Issue? Windows NT4.0/6a domain running Exchange 5.5/4 single site. User is primary windows NT account for his mailbox. User gets fired, I disable his NT account. If the user was connected through a VPN at 10:00AM and had his Outlook XP client open, then at 11:00AM I disabled his account and he never closed the application or disconnected from his VPN connection, would he still be able to send e-mail? TIA, Scott _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode =lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] *** The information contained in this message or any of its attachments may be confidential and is intended for the exclusive use
RE: Permission Issue?
Nope. But if you really want to be doubly sure, go modify his account and put yourself as the only account on the mailbox with permissions and set the Send/Receive limit to zero. -Original Message- From: Scott Force [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 6:12 AM To: Exchange Discussions Subject: Permission Issue? Windows NT4.0/6a domain running Exchange 5.5/4 single site. User is primary windows NT account for his mailbox. User gets fired, I disable his NT account. If the user was connected through a VPN at 10:00AM and had his Outlook XP client open, then at 11:00AM I disabled his account and he never closed the application or disconnected from his VPN connection, would he still be able to send e-mail? TIA, Scott _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Permission Issue?
Somehow this user was able to send out an e-mail an hour after his account was disabled. I checked my VPN log and he logged on before he was fired but didn't log off until 3 hours after he was canned (and his account disabled). I was st00pid in assuming that the manager at that location would physically remove him from his PC. If you're saying no, that this is not possible, how else could he have done it? Nope. But if you really want to be doubly sure, go modify his account and put yourself as the only account on the mailbox with permissions and set the Send/Receive limit to zero. -Original Message- From: Scott Force [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 6:12 AM To: Exchange Discussions Subject: Permission Issue? Windows NT4.0/6a domain running Exchange 5.5/4 single site. User is primary windows NT account for his mailbox. User gets fired, I disable his NT account. If the user was connected through a VPN at 10:00AM and had his Outlook XP client open, then at 11:00AM I disabled his account and he never closed the application or disconnected from his VPN connection, would he still be able to send e-mail? TIA, Scott _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re: Permission Issue?
My understanding is that an open session remains open and that disabling the account will not impact that session. - Original Message - From: Scott Force [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 9:11 AM Subject: Permission Issue? Windows NT4.0/6a domain running Exchange 5.5/4 single site. User is primary windows NT account for his mailbox. User gets fired, I disable his NT account. If the user was connected through a VPN at 10:00AM and had his Outlook XP client open, then at 11:00AM I disabled his account and he never closed the application or disconnected from his VPN connection, would he still be able to send e-mail? TIA, Scott _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Permission Issue?
Missy, In an NT 4.0 domain environment? I have the same environment as Scott has. Ex5.5 SP4 on a Win2000 SP2 machine, running in an NT 4.0 domain. The only difference is that they are using VPN...we are not at this time. However, we use one of our Help Desk temps occasionally to break up the boredom. We flip his network account between enabled and disabled every 20 minutes or so, for an hour or two, and depending on where the DC's are in their 15-minute refresh cycle, it can take as little as a minute for him to be locked out of everything. When he is locked out, the system asks him to put in his name and password every time he tries to send an e-mail and then subsequently denies his request. It also locks him out of any network connectivity. It does let him continue to use his workstation though. Scott...the only thing I can think of, is that you have changed the default refresh value for the DC's from 15 minutes to over an hour. -Original Message- From: Missy Koslosky [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 8:47 AM To: Exchange Discussions Subject: Re: Permission Issue? My understanding is that an open session remains open and that disabling the account will not impact that session. -Original Message- From: Scott Force [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 8:22 AM To: Exchange Discussions Subject: RE: Permission Issue? Somehow this user was able to send out an e-mail an hour after his account was disabled. I checked my VPN log and he logged on before he was fired but didn't log off until 3 hours after he was canned (and his account disabled). I was st00pid in assuming that the manager at that location would physically remove him from his PC. If you're saying no, that this is not possible, how else could he have done it? Nope. But if you really want to be doubly sure, go modify his account and put yourself as the only account on the mailbox with permissions and set the Send/Receive limit to zero. -Original Message- From: Scott Force [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 6:12 AM To: Exchange Discussions Subject: Permission Issue? Windows NT4.0/6a domain running Exchange 5.5/4 single site. User is primary windows NT account for his mailbox. User gets fired, I disable his NT account. If the user was connected through a VPN at 10:00AM and had his Outlook XP client open, then at 11:00AM I disabled his account and he never closed the application or disconnected from his VPN connection, would he still be able to send e-mail? TIA, Scott _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode =lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re: Permission Issue?
My understanding (which may well be flawed, but hey, this is my very own understanding, ya know?) is that Exchange doesn't really care about this. But if you're seeing evidence to the contrary, I could well be wrong. - Original Message - From: Blunt, James H (Jim) [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 1:01 PM Subject: RE: Permission Issue? Missy, In an NT 4.0 domain environment? I have the same environment as Scott has. Ex5.5 SP4 on a Win2000 SP2 machine, running in an NT 4.0 domain. The only difference is that they are using VPN...we are not at this time. However, we use one of our Help Desk temps occasionally to break up the boredom. We flip his network account between enabled and disabled every 20 minutes or so, for an hour or two, and depending on where the DC's are in their 15-minute refresh cycle, it can take as little as a minute for him to be locked out of everything. When he is locked out, the system asks him to put in his name and password every time he tries to send an e-mail and then subsequently denies his request. It also locks him out of any network connectivity. It does let him continue to use his workstation though. Scott...the only thing I can think of, is that you have changed the default refresh value for the DC's from 15 minutes to over an hour. -Original Message- From: Missy Koslosky [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 8:47 AM To: Exchange Discussions Subject: Re: Permission Issue? My understanding is that an open session remains open and that disabling the account will not impact that session. -Original Message- From: Scott Force [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 8:22 AM To: Exchange Discussions Subject: RE: Permission Issue? Somehow this user was able to send out an e-mail an hour after his account was disabled. I checked my VPN log and he logged on before he was fired but didn't log off until 3 hours after he was canned (and his account disabled). I was st00pid in assuming that the manager at that location would physically remove him from his PC. If you're saying no, that this is not possible, how else could he have done it? Nope. But if you really want to be doubly sure, go modify his account and put yourself as the only account on the mailbox with permissions and set the Send/Receive limit to zero. -Original Message- From: Scott Force [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 6:12 AM To: Exchange Discussions Subject: Permission Issue? Windows NT4.0/6a domain running Exchange 5.5/4 single site. User is primary windows NT account for his mailbox. User gets fired, I disable his NT account. If the user was connected through a VPN at 10:00AM and had his Outlook XP client open, then at 11:00AM I disabled his account and he never closed the application or disconnected from his VPN connection, would he still be able to send e-mail? TIA, Scott _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode =lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re: Permission Issue?
Sounds like an interesting question answer in the lab. Let us know how that turns out will ya? On 07/29/03 08:11, Scott Force [EMAIL PROTECTED] wrote: Windows NT4.0/6a domain running Exchange 5.5/4 single site. User is primary windows NT account for his mailbox. User gets fired, I disable his NT account. If the user was connected through a VPN at 10:00AM and had his Outlook XP client open, then at 11:00AM I disabled his account and he never closed the application or disconnected from his VPN connection, would he still be able to send e-mail? TIA, Scott _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
