restrict user access ECP

15 Feb
In Exchange 2010, you may need to restrict user access ECP to avoid employee information incompliance issue. So you have to use RBAC make it real.
The useful role is Mybaseoptions. you can see what it can done in help.
Run below PS in EMC use a organization administrator privilege account.
Set-RoleAssignmentPolicy "Default Role Assignment Policy" -Name "Unrestricted Role Assignment Policy"
New-RoleAssignmentPolicy -Name "Restricted Role Assignment Policy" -Description "This policy does not allow end users to set their OWA Options and 
perform other self-administration tasks." -Roles MyBaseOptions -IsDefault:$True
get-mailbox | ? {$_.department –eq “HR”}| set-mailbox -RoleAssignmentPolicy "Restricted Role Assignment Policy"

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: