tag:blogger.com,1999:blog-6696977109054687352.post7149265457458274120..comments2024-01-02T04:24:12.450-06:00Comments on Steven M. Jordan: How to Edit AD User Fields with ECP / OWA.Steven M. Jordanhttp://www.blogger.com/profile/08808713004280066782noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-6696977109054687352.post-50144612525755928072014-07-01T00:57:51.258-05:002014-07-01T00:57:51.258-05:00Hi Jeff,
We can't do much about the Mail Cont...Hi Jeff,<br /><br />We can't do much about the Mail Control/Phone & Voice buttons. However, we made sure to remove unnecessary management roles. Assigned users can see the the buttons but they cannot perform administrative tasks (e.g., search for others' email reports).<br /><br />The same goes for distribution groups and external contacts. We can hide and restrict delivery for either objects from their properties within the Exchange management GUI. <br /><br />We have more flexibility in regard to restricting which users our role group manages. We can restrict by setting the management scope for our new group. For example, change the recipient restriction filter for all users that live in Milwaukee: <br /><br />Set-ManagementScope "ECP_OWA-User_Fields" -RecipientRestrictionFilter { City -Eq "Milwaukee" -And RecipientType -Eq "UserMailbox" }<br /><br />Alternately, change the scope to only allow administrative access for a specific OU:<br /><br />Set-ManagementScope "ECP_OWA-User_Fields" -ServerRestrictionFilter { ServerSite -Eq "Madison,CN=Sites,CN=Configuration,DC=stevenjordan,DC=net" }<br /><br />We can accomplish something similar by editing the management role:<br /><br />Set-ManagementRoleAssignment "Mail Recipients Extended" -RecipientOrganizationalUnitScope "stevenjordan.net/Wisconsin/GB/Users"<br /><br />N.B., Any custom scopes on the role assignment are overwritten with the Set-ManagementRoleAssignment command.<br /><br /><br />http://technet.microsoft.com/en-us/library/dd297996%28v=exchg.150%29.aspx<br />http://technet.microsoft.com/en-us/library/dd297996%28v=exchg.150%29.aspxSteven M. Jordanhttps://www.blogger.com/profile/08808713004280066782noreply@blogger.comtag:blogger.com,1999:blog-6696977109054687352.post-61399440208627375812014-06-27T11:07:23.896-05:002014-06-27T11:07:23.896-05:00I did this and it works great, however, do you kno...I did this and it works great, however, do you know how I could remove the "Mail Control" and "Phone and Voice" options as well?<br /><br />In addition, is it possible to remove the "Distribution Groups" and "External Contacts" tabs?<br /><br />Lastly, Is it possible to restrict which users they can update?Jeff Dixonhttps://www.blogger.com/profile/14634331805002385646noreply@blogger.com