Microsoft KB Archive/146764

= Limiting logons to the Information Store in Exchange Server =

Article ID: 146764

Article Last Modified on 10/28/2006

-

APPLIES TO


 * Microsoft Exchange Server 4.0 Standard Edition
 * Microsoft Exchange Server 5.0 Standard Edition
 * Microsoft Exchange Server 5.5 Standard Edition

-



This article was previously published under Q146764



Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry



SUMMARY
Exchange Server administrators can limit the users who are allowed to log on to the information store. This can be useful when you need to perform maintenance or upgrades to the Exchange Server computer and if you need to keep users from logging on to Exchange.



MORE INFORMATION
To limit the users who are allowed to log on to the information store you need to edit the registry.

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To limit allowed users:  Stop the Information Store service on the Exchange Server computer. Start Registry Editor (Regedt32.exe). Locate the following key in the registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeIS\ParametersSystem

 On the Edit menu, click Add Value, and then add the following registry value:

Value Name:Enable Tracing

Data Type: REG_DWORD

Radix: Decimal

Value data: 1

 Click OK. In the Data box, type the distinguished names of the users that you want to allow to log on to the information store on separate lines, and then click OK. For example:

'''/o=microsoft/ou=apps-wga/cn=recipients/cn=user1

/o=microsoft/ou=apps-wga/cn=recipients/cn=user2'''

For more information about how to prevent problems with the Internet Mail Service, click the following article number to view the article in the Microsoft Knowledge Base:

306308 The Internet Mail Service does not start when limiting logons to the Information Store

 Click OK.</li> Quit Registry Editor.</li> Restart the Information Store service.</li></ol>

This procedure allows only those users entered in the registry parameter to log on to the information store. Users who are not specified in the registry parameter receive the following error message when they try to connect to the information store:

The set of folders could be opened. The attempt to log on to the Microsoft Exchange Server has failed.

NOTES: <ul> Leaving the registry parameter blank prevents all users from logging on to the information store.</li> To allow all users to again log on to the information store, you must remove the registry key. To remove the registry key: <ol> Stop the Information Store service on the Exchange Server computer.</li> Start Registry Editor (Regedt32.exe).</li> Locate the Logon Only As value under the following key in the registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeIS\ParametersSystem

</li> Click the Logon Only As value in the right pane.</li> On the Edit menu, click Delete.</li> Quit Registry Editor.</li> Restart the Information Store Service.</li></ol> </li></ul>

For more information about how to accomplish this with Exmerge, click the following article number to view the article in the Microsoft Knowledge Base:

262225 Unable to limit users from logging on when you use the Exmerge utility

Additional query words: disable stop limit logons prevent user exch2kp2w exmerge client

Keywords: kbenv kberrmsg kbhowto KB146764

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.