Create email only user account (prevent login to domain computers)

There are many ways to prevent Active Directory users from logging on to certain computers. For large and more complicated scenarios it's best to use Group Policy.

But if I need to create a few "email only" user accounts I normally do following:

  • Create a normal Exchange / Active Directory user account
  • Go to Active Directory Users and Computers and open the user account Properties
  • In the Account tab click on Log On To...
  • Select This use can log on to: The following computers and add your Exchange server computer account
    This will not allow user to actually login to the Exchange server (this is prevented by default server policies) , but you have to enter some computer account as otherwise it will revert to All Computers.

Active Directory - Logon Workstations

Windows Server 2008 R2 domain
Microsoft Exchange 2010

Newsletter

Subscribe to receive occasional updates on new posts.
Your email will not be used for any other purpose and you can unsubscribe at any time.
Please wait