WEB mail Access Deny

mgsuzen

I need to prevent some users in my production from accessing their mail from web mail. I want them to receive and send mail only through outlook or similar programs, but they should not be able to access web mail in any way. Is there a setting that I can block access to SOGO or MailCow UI on a user basis for this?

esackbauer

Yes, simply don’t give them their user password (or change it to some password only you have).
For the outlook or client programs provide them with app passwords.

mgsuzen

esackbauer
Thank you for the answer, nice method but not very applicable. We were able to do this in the OSE version on Zimbra servers. I will move my 2 zimbra servers with 800 users to mailcow after my mailcow tests. Unfortunately, a situation such as not giving the password to a service vari users that I provide as a mailhosting service is impossible for this scenario.

esackbauer

mgsuzen a situation such as not giving the password to a service vari users that I provide as a mailhosting service is impossible for this scenario.

You will give them a password, it’s the “app password” which can be defined in mailcows user interface (you can do this via impersonation from admin login). They can use the services you allow like EAS, IMAP, SMTP, etc. but they don’t have mailcow UI and SOGo access.
You can do this with API:
https://mailcow.docs.apiary.io/#reference/app-passwords/create-app-password/create-app-password

mgsuzen

esackbauer
Thank you very much