AndersonPatricio.ca

A Microsoft Unified Communications resource blog

Recent Posts

Search by Topic

Email Notifications

Blogroll

My Microsoft KBs

.:. About me..

Microsoft Community

Andy's Toolbox

Archives

Ads

Disabling Exchange Admin Center (EAC)

Hi Friday Lovers!!! It’s finally here, eh?

In Today’s post we are going to disable EAC and that can be done easily through Exchange Management Shell and the Set-ECPVirtualDirectory cmdlet.

Why you should do that? Well, depends of your security requirements. You may have a policy that does not allow any management outside of your network or something like that.

Anyways, here is the two cmdlets, in the first one I find the current value and afterwards I change it. Also a IISReset is a good thing to force the refresh.

image

How about the results? If any admin that used to have the full admin console tries to log on using ECP he will have the same logon page, no surprises here.

image

However after logging then he will have a surprise where he will be able to manage just his personal mailbox settings not the organization.

image

Cheers,
Anderson Patricio
http://www.andersonpatricio.ca
http://www.andersonpatricio.org (Portuguese)
Twitter: @apatricio

Comments

Jenelle said:

We definielty need more smart people like you around.

# November 28, 2012 2:24 AM
Leave a Comment

(required) 

(required) 

(optional)
 

(required) 

If you can't read this number refresh your screen
Enter the numbers above: