Required permissions for OWA access

[PHead2]

I want to setup a few users so they can only access OWA and nothing else in the domain. I created a security group for them and added it to the local users group on the exchange server. I then removed them from the Domain Users group. They cannot access OWA, allthough I am sure the mailbox is functioning (I gave myself permission to open it and can use it through Outlook).

What is necessary for users to have access to their own mailbox and OWA?

 

[Marcs41]

What is necessary for users to have access to their own mailbox and OWA?

At least to be able to log in!
You removed them, so that leaves just a mailbox sitting there.
Testing access with your account does not mean a thing.
It is THEIR account that has to be able to log in.

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!}

 

[PHead2]

I guess I could have been a little clearer, I didn't delete the accounts, I removed them from the domain user's security group and gave local permissions on the exchange server.

It didn't turn out to be a permissions/group membership anyway...

I didn't want to use the default email addresses assigned to accounts (in the default recipient policy), I only wanted them to use addresses from another domain which I added another recipient policy for. Getting rid of the default addresses (there are three domain names in default policy - don't ask me why as I didn't set it up and never met who did) caused the user to not be able to access OWA allthough they could still use Outlook. Re-creating the addresses did not help, I had to delete and re-create the accounts to get it working. I just added the addresses to the other domain names and set the one I wanted to be primary as primary. Everything is fine except that the users have three email addresses from the default recipient policy that I don't want them to have but getting rid of these is what caused OWA to not work.

I'm not too knowledgable on this area of Exchange, if you can explain in detail how it works I'd be interested, specifically why the original addresses are required and why re-adding them doesn't do everything that happens when they are created at the time the account is created. I have no idea what the relationships between these things are.