XADM: Limiting Logons to the Information Store

• Microsoft Exchange Server, version 4.0

SUMMARY

Microsoft Exchange administrators can limit the users who are allowed to logon to the Information Store. This can be useful when you need to perform maintenance or upgrades to the Microsoft Exchange Server and to keep users from logging into Exchange.

MORE INFORMATION

To limit allowed users:

1. Stop the Information Store Service on the Exchange Server.

2. Run Registry Editor (REGEDT32.EXE).

3. From the HKEY_LOCAL_MACHINE subtree, go to the following key:

         \SYSTEM\CurrentControlSet\Services\MSExchangeIS\ParametersSystem
   

4. Select EDIT, and then ADD VALUE, type "Logon Only As" in the VALUE NAME box (do not type the quotes but do type the spaces and capitalize as indicated). Type REG_MULTI_SZ in the Data Type box.

5. Choose the OK button. In the Data box, type the Distinguished Names of those you want to allow to logon to the Information Store on separate lines and then choose the OK button. For example:

         /o=microsoft/ou=apps-wga/cn=recipients/cn=user1
         /o=microsoft/ou=apps-wga/cn=recipients/cn=user2
   

6. Choose the OK button.

7. Close the registry editor.

8. Restart the Information Store Service.

   The set of folders could be opened.
   The attempt to log on to the Microsoft Exchange Server has failed

• Leaving the registry parameter blank prevents all users from logging onto the Information Store.
• To allow all users to again logon onto the Information Store the registry key must be removed. The following steps can be used to remove the registry key:

1. Stop the Information Store Service on the Exchange Server.

2. Run Registry Editor (REGEDT32.EXE).

3. From the HKEY_LOCAL_MACHINE subtree, go to the following key:

         \SYSTEM\CurrentControlSet\Services\MSExchangeIS\ParametersSystem
   

4. Select the "Logon Only As" value in the right pane.

5. Select EDIT and then DELETE.

6. Close the registry editor.

7. Restart the Information Store Service.