Deny Access/ Termination - ACL issue

HCL Domino Domino Forum
1

Hi there,

I have a couple of employees (domino admins) who left the company.

Want to keep their ID and mail file alive but restrict their access to any server in the domain.

Got a pair of cluster server for mail, a Domino blackberry server and a domino application server.

I moved the two first in Terminations group and then Deny Access list. Replicated the cluster servers (for names.nsf). Found out that Blackberry server did not update its names.nsf so added the two in the termination/deny access on the BB server’s names.nsf also (manually - even though it does not have their mail db’s on it).

Then for iNotes access I set No Access for max internet name and pw on both the mail files and reset their internet password. Verified they are in terminations on both primary, cluster and application server. Verified mail file ACL got changed on primnary and cluster.

I am still able to login to access their mail file via iNotes. Any reason why ? Does it take a while for the server to update ACL ? they are still in the Admin group - does that have any effect on ACL for iNotes ?

thanks for any help

Ayaz

2

Subject: Deny Access/ Termination - ACL issue

Why not use full access administration to remove all but Local Domains Servers and yourself from the AClBTW why are they still in the adminsitrators group?

HTH

3

Subject: RE: Deny Access/ Termination - ACL issue

thanks for the input Jim,

getting them removed from admin and other groups … they left very recently … i thought a quick way to disable their access was terminations/deny access and db ACL - but i find it strange iNotes would still let me login/out and view calendar entries …

4

Subject: RE: Deny Access/ Termination - ACL issue

Go to users mail file - Database Propreties and select do not allow URL open

User will not be able to login thru WEB

5

Subject: Deny Access/ Termination - ACL issue

I just noticed that even though it allows login to iNotes but only shows calendar entries … when try to goto preferences says can’t do it - access level is set to No Access …