My understanding (which may well be flawed, but hey, this is my very own
understanding, ya know?) is that Exchange doesn't really care about this.
But if you're seeing evidence to the contrary, I could well be wrong.
----- Original Message -----
From: "Blunt, James H (Jim)" <[EMAIL PROTECTED]>
To: "Exchange Discussions" <[EMAIL PROTECTED]>
Sent: Tuesday, July 29, 2003 1:01 PM
Subject: RE: Permission Issue?


Missy,

In an NT 4.0 domain environment?

I have the same environment as Scott has.  Ex5.5 SP4 on a Win2000 SP2
machine, running in an NT 4.0 domain.  The only difference is that they are
using VPN...we are not at this time.

However, we use one of our Help Desk temps occasionally to break up the
boredom.  We flip his network account between enabled and disabled every 20
minutes or so, for an hour or two, and depending on where the DC's are in
their 15-minute refresh cycle, it can take as little as a minute for him to
be locked out of everything.  When he is locked out, the system asks him to
put in his name and password every time he tries to send an e-mail and then
subsequently denies his request.  It also locks him out of any network
connectivity.  It does let him continue to use his workstation though.

Scott...the only thing I can think of, is that you have changed the default
refresh value for the DC's from 15 minutes to over an hour.

-----Original Message-----
From: Missy Koslosky [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 29, 2003 8:47 AM
To: Exchange Discussions
Subject: Re: Permission Issue?


My understanding is that an open session remains open and that disabling the
account will not impact that session.

-----Original Message-----
From: Scott Force [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 29, 2003 8:22 AM
To: Exchange Discussions
Subject: RE: Permission Issue?


Somehow this user was able to send out an e-mail an hour after his account
was disabled.  I checked my VPN log and he logged on before he was fired but
didn't log off until 3 hours after he was canned (and his account disabled).
I was st00pid in assuming that the manager at that location would physically
remove him from his PC.

If you're saying no, that this is not possible, how else could he have done
it?

> Nope.
>
> But if you really want to be doubly sure, go modify his account and
> put yourself as the only account on the mailbox with permissions and
> set the Send/Receive limit to zero.
>
> -----Original Message-----
> From: Scott Force [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, July 29, 2003 6:12 AM
> To: Exchange Discussions
> Subject: Permission Issue?
>
>
> Windows NT4.0/6a domain running Exchange 5.5/4 single site.  User is
> primary windows NT account for his mailbox.  User gets fired, I
> disable his NT account.  If the user was connected through a VPN at
> 10:00AM and had his Outlook XP client open, then at 11:00AM I disabled
> his account and he never closed the application or disconnected from
> his VPN connection, would he still be able to send e-mail?  TIA, Scott
>
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Web Interface:
> http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode
> =&lang
> =english
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang
=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang
=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to